Hacker News Reader

Comment by mark_and_sweep | Hacker News Reader

I think part of the reason that we don't have such a function yet is that it is essentially a one-liner if you use decimal notation for entities:

function escape_html(s) { return s.replace(/[&<>"']/g, m => `&#${m.charCodeAt(0)};`) }

That being said, a built-in function would be convenient and faster.

One problem is that it's just as simple to implement an incirrect version of this function

The `textContent` setter also does this. E.g. you can do this:

    const span = document.createElement('span')
    span.textContent = text
    return span.innerHTML

This does not handle quotes as far as I remember

There are many built-in functions that could also be accomplished with a one-liner akin to your example.

I hear what you're saying - there's an easy manual workaround for this requirement - but a built-in function would still add value nonetheless.

Agreed. As I said, it would be convenient, faster, and most importantly, guaranteed to be error-free.