js在线转义

function escapeHtml(unsafe) {
  return unsafe
    .replace(/&/g, "&")
    .replace(/</g, "&lt;")
    .replace(/>/g, "&gt;")
    .replace(/"/g, "&quot;")
    .replace(/'/g, "&#039;");
}

const userInput = '<script>alert("XSS")</script>';
const safeOutput = escapeHtml(userInput);
console.log(safeOutput); // &lt;script&gt;alert(&quot;XSS&quot;)&lt;/script&gt;

function escapeJavaScript(str) {
  return str.replace(/\\/g, '\\\\')
            .replace(/"/g, '\\"')
            .replace(/'/g, "\\'")
            .replace(/\n/g, '\\n')
            .replace(/\r/g, '\\r');
}

const jsInput = 'console.log("Hello\nWorld");';
const safeJsOutput = escapeJavaScript(jsInput);
console.log(safeJsOutput); // console.log(\"Hello\\nWorld\");

// 正确显示转义后的 HTML 内容
document.getElementById('output').textContent = safeOutput;