This is a Javascript version of the PHP function: htmlspecialchars.

PHP htmlspecialchars

Description

htmlspecialchars - Convert special characters to HTML entities

string htmlspecialchars( string string [, int quote_style [, string charset [, bool double_encode]]] )

The translations performed are:'&' (ampersand) becomes '&amp;''"' (double quote) becomes '&quot;' when ENT_NOQUOTESis not set.''' (single quote) becomes '&#039;' only whenENT_QUOTES is set.'<' (less than) becomes '&lt;''>' (greater than) becomes '&gt;'

Parameters

• string

  The string being converted.

• quote_style

  The optional second argument, quote_style , tells the function what to do with single and double quote characters. The default mode, ENT_COMPAT, is the backwards compatible mode which only translates the double-quote character and leaves the single-quote untranslated. If ENT_QUOTES is set, both single and double quotes are translated and if ENT_NOQUOTES is set neither single nor double quotes are translated.

• charset

  Defines character set used in conversion. The default character set is ISO-8859-1.

  Following character sets are supported in PHP 4.3.0 and later.

  Supported charsets

  Charset	Aliases	Description
  ISO-8859-1	ISO8859-1	Western European, Latin-1
  ISO-8859-15	ISO8859-15	Western European, Latin-9. Adds the Euro sign, French and Finnish letters missing in Latin-1(ISO-8859-1).
  UTF-8		ASCII compatible multi-byte 8-bit Unicode.
  cp866	ibm866, 866	DOS-specific Cyrillic charset. This charset is supported in 4.3.2.
  cp1251	Windows-1251, win-1251, 1251	Windows-specific Cyrillic charset. This charset is supported in 4.3.2.
  cp1252	Windows-1252, 1252	Windows specific charset for Western European.
  KOI8-R	koi8-ru, koi8r	Russian. This charset is supported in 4.3.2.
  BIG5	950	Traditional Chinese, mainly used in Taiwan.
  GB2312	936	Simplified Chinese, national standard character set.
  BIG5-HKSCS		Big5 with Hong Kong extensions, Traditional Chinese.
  Shift_JIS	SJIS, 932	Japanese
  EUC-JP	EUCJP	Japanese

  Note: Any other character sets are not recognized and ISO-8859-1 will be used instead.

• double_encode

  When double_encode is turned off PHP will not encode existing html entities, the default is to convert everything.

Return Values

The converted string.

See Also

• javascript htmlspecialchars_decode()
• javascript strip_tags()
• javascript htmlentities()
• javascript nl2br()

Javascript htmlspecialchars

Source

This is the main source of the Javascript version of PHP's htmlspecialchars

function htmlspecialchars(string, quote_style) {
    // http://kevin.vanzonneveld.net
    // +   original by: Mirek Slugen
    // +   improved by: Kevin van Zonneveld (http://kevin.vanzonneveld.net)
    // +   bugfixed by: Nathan
    // +   bugfixed by: Arno
    // *     example 1: htmlspecialchars("<a href='test'>Test</a>", 'ENT_QUOTES');
    // *     returns 1: '&lt;a href=&#039;test&#039;&gt;Test&lt;/a&gt;'
    
    string = string.toString();
    
    // Always encode
    string = string.replace(/&/g, '&amp;');
    string = string.replace(/</g, '&lt;');
    string = string.replace(/>/g, '&gt;');
    
    // Encode depending on quote_style
    if (quote_style == 'ENT_QUOTES') {
        string = string.replace(/"/g, '&quot;');
        string = string.replace(/'/g, '&#039;');
    } else if (quote_style != 'ENT_NOQUOTES') {
        // All other cases (ENT_COMPAT, default, but not ENT_NOQUOTES)
        string = string.replace(/"/g, '&quot;');
    }
    
    return string;
}

Examples

Currently there is 1 example

Example 1

htmlspecialchars("<a href='test'>Test</a>", 'ENT_QUOTES');

'<a href=&#039;test&#039;>Test</a>'

More about this Project

Download php.js

To easily include it in your code, every function currently available is stored in

Normal

• uncompressed source: php.js (169.4kB)
• minified: php.min.js (62.1kB) [recommended]
• compressed: php.packed.js (45.4kB)

Namespaced What is 'namespaced?'

• uncompressed source: php.namespaced.js (208.7kB)
• minified: php.namespaced.min.js (62.3kB)
• compressed: php.namespaced.packed.js (45.6kB)

To download use Right click, Save Link As
Generally the best way is to use a minified version and gzip it

Testing the functions

The number of functions is growing fast and so it becomes hard to maintain quality.

To defeat that danger of bad code, syntax errors, etc, I've added a new feature: php.js tester.

It is an automatically generated page that includes ALL functions in your browser, and then extracts specific testing information from each function's comments. This info is then used to run the function, and the return value is compared to a predefined one.

If you want, go check it out.

Credits

Respect & awards go to everybody who has contributed in some way so far:

	Michael White (link) for contributing to:
	array_count_values, get_included_files, include, include_once, require, require_once, md5, number_format, parse_str, printf, sha1, sprintf, str_pad, strnatcmp, http_build_query, floatval, is_object, print_r
	_argos for contributing to:
	array_fill, array_pad, array_product, array_rand, compact, count, range, abs, defined, ip2long, long2ip, implode, strcmp, ucwords
	Jonas Raoni Soares Silva (link) for contributing to:
	shuffle, abs, setcookie, number_format, number_format, soundex, str_repeat, str_replace, str_rot13, ucwords, wordwrap, wordwrap
	Legaev Andrey for contributing to:
	end, reset, file, file_get_contents, function_exists, include, include_once, http_build_query, is_array, is_object
	Ates Goral (link) for contributing to:
	array_change_key_case, array_count_values, array_diff_key, get_class, preg_quote, addslashes, count_chars, str_rot13, stripslashes
	Philip Peterson for contributing to:
	sizeof, round, echo, nl2br, str_replace, strchr, urldecode, urlencode, var_export
	Martijn Wieringa for contributing to:
	array_shift, array_unshift, str_ireplace, str_split, strcasecmp, stripos, strnatcmp, substr
	Webtoolkit.info (link) for contributing to:
	crc32, md5, sha1, utf8_decode, utf8_encode
	Carlos R. L. Rodrigues (link) for contributing to:
	array_chunk, array_unique, date, levenshtein
	Ash Searle (link) for contributing to:
	basename, printf, sprintf
	Erkekjetter for contributing to:
	ltrim, rtrim, trim
	GeekFG (link) for contributing to:
	krsort, ksort, time
	Johnny Mast (link) for contributing to:
	array_walk, array_walk_recursive, create_function
	d3x for contributing to:
	array, explode, unserialize
	marrtins for contributing to:
	array_change_key_case, addslashes, stripslashes
	Alfonso Jimenez (link) for contributing to:
	array_reduce, strpbrk
	Aman Gupta for contributing to:
	base64_decode, utf8_decode
	Arpad Ray (mailto:arpad@php.net) for contributing to:
	serialize, unserialize
	Karol Kowalski for contributing to:
	array_reverse, abs
	Mirek Slugen for contributing to:
	htmlspecialchars, htmlspecialchars_decode
	Onno Marsman for contributing to:
	addslashes, isset
	Thunder.m for contributing to:
	base64_decode, base64_encode
	Tyler Akins (link) for contributing to:
	base64_decode, base64_encode
	mdsjack (link) for contributing to:
	include, trim
	Alex for contributing to:
	is_int
	Alexander Ermolaev (link) for contributing to:
	trim
	Allan Jensen (link) for contributing to:
	number_format
	Andrea Giammarchi (link) for contributing to:
	array_map
	Arno for contributing to:
	htmlspecialchars
	Bayron Guevara for contributing to:
	base64_encode
	Ben Bryan for contributing to:
	print_r
	Benjamin Lupton for contributing to:
	number_format
	Brad Touesnard for contributing to:
	date
	Brett Zamir for contributing to:
	str_split
	Cagri Ekin for contributing to:
	parse_str
	Cord for contributing to:
	is_array
	David for contributing to:
	is_numeric
	David James for contributing to:
	get_class
	DxGx for contributing to:
	trim
	FGFEmperor for contributing to:
	mktime
	Felix Geisendoerfer (link) for contributing to:
	array_key_exists
	FremyCompany for contributing to:
	isset
	Gabriel Paderni for contributing to:
	str_replace
	Howard Yeend for contributing to:
	number_format
	J A R for contributing to:
	end
	Jack for contributing to:
	trim
	Leslie Hoare for contributing to:
	rand
	Lincoln Ramsay for contributing to:
	basename
	Luke Godfrey for contributing to:
	strip_tags
	MeEtc (link) for contributing to:
	date
	Mick@el for contributing to:
	stripslashes
	Nate for contributing to:
	addslashes
	Nathan for contributing to:
	htmlspecialchars
	Nick Callen for contributing to:
	wordwrap
	Ozh for contributing to:
	dirname
	Pedro Tainha (link) for contributing to:
	unserialize
	Peter-Paul Koch (link) for contributing to:
	date
	Philippe Baumann for contributing to:
	empty
	Pyerre for contributing to:
	checkdate
	Sakimori for contributing to:
	strlen
	Sanjoy Roy for contributing to:
	array_diff
	Simon Willison (link) for contributing to:
	str_replace
	Steve Clay for contributing to:
	function_exists
	Steve Hilder for contributing to:
	strcmp
	Steven Levithan (link) for contributing to:
	trim
	T0bsn for contributing to:
	crc32
	Thiago Mata (link) for contributing to:
	call_user_func_array
	Tim Wiel for contributing to:
	date
	XoraX (link) for contributing to:
	dirname
	Yannoo for contributing to:
	mktime
	baris ozdil for contributing to:
	mktime
	booeyOH for contributing to:
	preg_quote
	djmix for contributing to:
	basename
	dptr1988 for contributing to:
	unserialize
	duncan for contributing to:
	array_unique
	echo is bad for contributing to:
	echo
	gabriel paderni for contributing to:
	mktime
	ger for contributing to:
	html_entity_decode
	gorthaur for contributing to:
	strcmp
	jakes for contributing to:
	mktime
	john (link) for contributing to:
	html_entity_decode
	johnrembo for contributing to:
	var_export
	kenneth for contributing to:
	explode
	loonquawl for contributing to:
	htmlspecialchars_decode
	metjay for contributing to:
	time
	penutbutterjelly for contributing to:
	str_ireplace
	sankai for contributing to:
	array_count_values
	sowberry for contributing to:
	utf8_encode
	stensi for contributing to:
	intval

Your name here?

Contributing is as easy as adding a comment with better code, or code for a new function.
Any contribution leading to improvement will directly get your name & link here.

Coming Project features

Project features that we are currently working on:

• Versioning. Individual functions are versioned, but the entire library should be versioned as well.
• Light. A lightweight version of php.js should be made available with only common functions in it.
• Site. A place for PHP.JS of it's own. You can track our lame attempts at phpjs.org (not hyperlinked deliberately). If there are any CakePHP developers out there who would like to contribute, contact me.
• Testsuite. A better test-suite that can be ran locally so developers can easily test before commiting. Also the testing itself should be more thorough.