Method htmlElementContent

java/org/apache/tomcat/util/security/Escape.java:42–69

Escape content for use in HTML. This escaping is suitable for the following uses: Element content when the escaped data will be placed directly inside tags such as <p>, <td> etc. Attribute values when the attribute value is quoted with " or '. @par

(String content)

     * @return The escaped content or {@code null} if the content was {@code null}
     */
    public static String htmlElementContent(String content) {
        if (content == null) {
            return null;
        }

        StringBuilder sb = new StringBuilder();

        for (int i = 0; i < content.length(); i++) {
            char c = content.charAt(i);
            if (c == '<') {
                sb.append("&lt;");
            } else if (c == '>') {
                sb.append("&gt;");
            } else if (c == '\'') {
                sb.append("&#39;");
            } else if (c == '&') {
                sb.append("&amp;");
            } else if (c == '"') {
                sb.append("&quot;");
            } else if (c == '/') {
                sb.append("&#47;");
            } else {
                sb.append(c);
            }
        }

        return (sb.length() > content.length()) ? sb.toString() : content;
    }


    /**