differences with underscore.string.escapeHtml

[mathiasbynens]

differences with underscore.string.escapeHtml

[mathiasbynens]

For the most common escapeHTML-like functions you only need to escape a couple of characters, i.e.

he/he.js

Lines 34 to 50 in 78bc2bb

	var regexEscape = /["&'<>`]/g;
	var escapeMap = {
	'"': '&quot;',
	'&': '&amp;',
	'\'': '&#x27;',
	'<': '&lt;',
	// See http://mathiasbynens.be/notes/ambiguous-ampersands: in HTML, the
	// following is not strictly necessary unless it’s part of a tag or an
	// unquoted attribute value. We’re only escaping it to support those
	// situations, and for XML support.
	'>': '&gt;',
	// In Internet Explorer ≤ 8, the backtick character can be used
	// to break out of (un)quoted attribute values or HTML comments.
	// See http://html5sec.org/#102, http://html5sec.org/#108, and
	// http://html5sec.org/#133.
	'`': '&#x60;'
	};

. If this functionality is all you need, you probably don’t need he.

he’s main functionality is something else entirely. See #18 (comment) for more info.

[Yvem]

Thanks for this quick response !