* Helpers
(html, encode)
| 1223 | */ |
| 1224 | |
| 1225 | function escape(html, encode) { |
| 1226 | return html |
| 1227 | .replace(!encode ? /&(?!#?\w+;)/g : /&/g, '&') |
| 1228 | .replace(/</g, '<') |
| 1229 | .replace(/>/g, '>') |
| 1230 | .replace(/"/g, '"') |
| 1231 | .replace(/'/g, '''); |
| 1232 | } |
| 1233 | |
| 1234 | function unescape(html) { |
| 1235 | // explicitly match decimal, hex, and named HTML entities |