How do I update the below code to escape HTML and strings in JavaScript arrays. I am trying to use a function escapeHtml to add the slashes but it won't execute as intended. Thanks
<!DOCTYPE html>
<html>
<body>
<p id="demo"></p>
<script>
function escapeHtml(unsafe)
{
return unsafe
.replace(/&/g, "&")
.replace(/</g, "<")
.replace(/>/g, ">")
.replace(/"/g, """)
.replace(/'/g, "'");
}
var unsafe = ["car's", "<h1>hello</h1>", "Ref#1", "a-b", "he said "hello" to him"];
document.getElementById("demo").innerHTML = escapeHtml(unsafe);
</script>
</body>
</html>
You have to call escapeHtml for each element in array:
document.getElementById("demo").innerHTML = unsafe.map(a => escapeHtml(a));