Function WebEscape

src/brpc/controller.cpp:1484–1496

TODO: Need more security advices from professionals. TODO: Is percent encoding better?

// TODO: Need more security advices from professionals.
// TODO: Is percent encoding better?
void WebEscape(const std::string& source, std::string* output) {
    output->reserve(source.length() + 10);
    for (size_t pos = 0; pos != source.size(); ++pos) {
        switch (source[pos]) {
        case '&':  output->append("&");          break;
        case '\"': output->append(""");         break;
        case '\'': output->append("'");         break;
        case '<':  output->append("&lt;");           break;
        case '>':  output->append("&gt;");           break;
        default:   output->push_back(source[pos]);   break;
        }
    }
}

std::string WebEscape(const std::string& source) {
    std::string output;