* Helpers
(html, encode)
| 1274 | */ |
| 1275 | |
| 1276 | function escape(html, encode) { |
| 1277 | return html |
| 1278 | .replace(!encode ? /&(?!#?\w+;)/g : /&/g, '&') |
| 1279 | .replace(/</g, '<') |
| 1280 | .replace(/>/g, '>') |
| 1281 | .replace(/"/g, '"') |
| 1282 | .replace(/'/g, '''); |
| 1283 | } |
| 1284 | |
| 1285 | function unescape(html) { |
| 1286 | // explicitly match decimal, hex, and named HTML entities |