blob: 6e5008d03019310422debd1b8a6627a349fc23b5 [file] [log] [blame]
/**
* Escape html special chars.
*
* @param unsafe - A unsafe string.
*
* @returns A safe string can be injected as innerHTML.
*/
export function escapeHtml(unsafe: string): string {
return unsafe
.replace(/&/g, "&")
.replace(/</g, "&lt;")
.replace(/>/g, "&gt;")
.replace(/"/g, "&quot;")
.replace(/'/g, "&#039;");
}