How to encode a string in JavaScript for displaying in HTML? [duplicate]

Question

Possible Duplicate:
How to escape HTML

How can a string be converted to HTML in JavaScript?

e.g.

var unsafestring = "<oohlook&atme>"; var safestring = magic(unsafestring); 

where safestring now equals "<ohhlook&atme>"

I am looking for magic(...). I am not using JQuery for magic.

Answer 1

function htmlEntities(str) {     return String(str).replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;'); } 

So then with var unsafestring = "<oohlook&atme>"; you would use htmlEntities(unsafestring);