In JavaScript, how to escape HTML characters?

The following JavaScript code is used to convert special characters into HTML entities:

var entityMap = {
  '&': '&',
  '<': '<',
  '>': '>',
  '"': '"',
  "'": '&#39;',
  '/': '&#x2F;',
  '`': '&#x60;',
  '=': '&#x3D;'
};

function escapeHtml (string) {
  return String(string).replace(/[&<>"'`=\/]/g, function (s) {
    return entityMap[s];
  });
}

Here is the result:

var before="\" \' & < > =";
var after = escapeHtml(before);

// Affiche "Before : " ' & < > ="
console.log ("Before : " + before);
// Affiche : "After : " &#39; & < > &#x3D;"
console.log ("After : " + after);

Try online on JSFiddle.

Source : Escaping HTML strings with jQuery

The following JavaScript code is used to convert special characters into HTML entities:

var entityMap = {
  '&': '&',
  '<': '<',
  '>': '>',
  '"': '"',
  "'": '&#39;',
  '/': '&#x2F;',
  '`': '&#x60;',
  '=': '&#x3D;'
};

function escapeHtml (string) {
  return String(string).replace(/[&<>"'`=\/]/g, function (s) {
    return entityMap[s];
  });
}

Here is the result:

var before="\" \' & < > =";
var after = escapeHtml(before);

// Affiche "Before : " ' & < > ="
console.log ("Before : " + before);
// Affiche : "After : " &#39; & < > &#x3D;"
console.log ("After : " + after);

Try online on JSFiddle.

Source : Escaping HTML strings with jQuery