EncodeForHTML
Encodes the input string for safe output in the body of a HTML tag.
The encoding in meant to mitigate Cross Site Scripting (XSS) attacks. This function can provide more protection from XSS than the HTMLEditFormat or XMLFormat functions do.
Method Signature
EncodeForHTML(string=[string], canonicalize=[boolean])Arguments
Argument
Type
Required
Description
Default
string
string
true
The string to encode.
canonicalize
boolean
true
If set to true, canonicalization happens before encoding. If set to false, the given input string will just be encoded.
false
Examples
Escapes the HTML characters
htmlEditFormat( "This is a test & this is another <This text is in angle brackets> Previous line was blank!!!" );
Result: This is a test & this is another <This text is in angle brackets> Previous line was blank!!!
Additional Examples
testString = "Hello !!!
<This text is inside of angle brackets>
This text is outside of angle brackets !!!";
writeoutput( testString );
writeoutput( "<h5>HTMLEditFormat</h5>" & HTMLEditFormat( testString ) );
Related
Last updated
Was this helpful?