Skip to main content

escape_javascript

Function escape_javascript 

Source
pub fn escape_javascript(text: &str) -> String
Expand description

Escapes text for a JavaScript string literal in single, double or back quotes (Rails’ escape_javascript).

Backslashes, quotes, `, $, newlines, U+2028/U+2029 and </ are escaped. Prefer passing data as JSON (json_escape) or data- attributes; with a Content-Security-Policy, inline scripts also need a nonce (CspNonce).

§Examples

use ocre::security::escape_javascript;

assert_eq!(escape_javascript("It's \"fine\"\n</script>"), r#"It\'s \"fine\"\n<\/script>"#);