forms/lib/htmlEscape.js

An easy way to create, parse, and validate forms

'use strict';

/*
 * from hogan https://github.com/twitter/hogan.js/blob/master/lib/template.js#L317-L327
 */
module.exports = (function () {
    var rAmp = /&/g;
    var rLt = /</g;
    var rGt = />/g;
    var rApos = /'/g;
    var rQuot = /"/g;
    var hChars = /[&<>"']/;

    var coerceToString = function (value) {
        return typeof value === 'undefined' || value === null ? '' : String(value);
    };

    var htmlEscape = function (value) {
        var str = coerceToString(value);
        return hChars.test(str)
            ? str.replace(rAmp, '&amp;')
                .replace(rLt, '&lt;')
                .replace(rGt, '&gt;')
                .replace(rApos, '&#39;')
                .replace(rQuot, '&quot;')
            : str;
    };

    return htmlEscape;
}());