GO HTMLEscape的用法是什么-开发者知识库平台

GO HTMLEscape的用法是什么

721

2023/11/18 7:48:57

栏目: 编程语言

The HTMLEscape function is used to escape special characters in a given string so that they can be safely displayed in HTML. It is commonly used to prevent HTML injection and to ensure that user-generated content is properly rendered.

The function replaces the special characters with their corresponding HTML entities. For example, the less-than symbol “<” is replaced with “<”, the greater-than symbol “>” is replaced with “>”, and the ampersand symbol “&” is replaced with “&”.

Here is an example usage of the HTMLEscape function in Go:

package main

import (
	"fmt"
	"html"
)

func main() {
	str := "<script>alert('Hello, World!');</script>"
	escapedStr := html.EscapeString(str)
	fmt.Println(escapedStr)
}

Output:

<script>alert(&#39;Hello, World!&#39;);</script>

In the above example, the html.EscapeString() function is used to escape the special characters in the given string "<script>alert('Hello, World!');</script>". The result is then printed, showing the escaped version of the string that can be safely displayed in HTML without executing any scripts.

辰迅云「云服务器」，即开即用、新一代英特尔至强铂金CPU、三副本存储NVMe SSD云盘，价格低至29元/月。点击查看>>

GO HTMLEscape的用法是什么

最新知识库

相关标签