Function escapeHtml

website/src/scripts/utils.ts:361–372

(text: string | string[])

 * Escape HTML to prevent XSS
 */
export function escapeHtml(text: string | string[]): string {
  if (Array.isArray(text)) {
    return text.map(escapeHtml).join(", ");
  }

  return text
    .replace(/&/g, "&")
    .replace(/</g, "&lt;")
    .replace(/>/g, "&gt;")
    .replace(/"/g, "&quot;")
    .replace(/'/g, "&#39;");
}

/**
 * Validate and sanitize URLs to prevent XSS attacks