js特殊字符转义

// 转义双引号
let str1 = "He said, \"Hello, world!\"";
console.log(str1); // 输出: He said, "Hello, world!"

// 转义换行符和制表符
let str2 = "First line
Second line\tTabbed";
console.log(str2);
// 输出:
// First line
// Second line   Tabbed

// 防止XSS攻击
function escapeHtml(text) {
    let map = {
        '&': '&',
        '<': '&lt;',
        '>': '&gt;',
        '"': '&quot;',
        "'": '&#039;'
    };
    return text.replace(/[&<>"']/g, function(m) { return map[m]; });
}

let userInput = '<script>alert("XSS")</script>';
let safeInput = escapeHtml(userInput);
console.log(safeInput); // 输出: &lt;script&gt;alert(&quot;XSS&quot;)&lt;/script&gt;

let str = "He said, \"Hello, world!\"";