The Bun.escapeHTML()
utility can be used to escape HTML characters in a string. The following replacements are made.
"
becomes"""
&
becomes"&"
'
becomes"'"
<
becomes"<"
>
becomes">"
This function is optimized for large input. Non-string types will be converted to a string before escaping.
Bun.escapeHTML("<script>alert('Hello World!')</script>");
// <script>alert('Hello World!')</script>
See Docs > API > Utils for more useful utilities.