安全-html转码
# html转码
目的:
- 避免执行危险代码
- 增加接口复杂度,防刷
# 代码
const HtmlUtil = {
/*1.用正则表达式实现html转码*/
htmlEncodeByRegExp: function(str: string) {
var s = '';
if (str.length == 0) return '';
s = str.replace(/&/g,"&");
s = s.replace(/</g,"<");
s = s.replace(/>/g,">");
s = s.replace(/ /g," ");
s = s.replace(/\'/g,"'");
s = s.replace(/\"/g, '"');
return s;
},
/*2.用正则表达式实现html解码*/
htmlDecodeByRegExp: function(str: string) {
var s = '';
if (str.length == 0) return '';
s = str.replace(/&/g, '&');
s = s.replace(/</g, '<');
s = s.replace(/>/g, '>');
s = s.replace(/ /g, ' ');
s = s.replace(/'/g, "'");
s = s.replace(/"/g, '"');
return s;
},
};
上次更新: 2021/12/19, 18:05:42