How to turn HTML-format user input into text in prompt [duplicate]

Question

I want to have a prompt box asking the user for their name. But I'm putting that directly into the page, and if I enter something HTML-y (<canvas> for example) then it places that element on the page. How can I make this into text, so instead of making a <canvas> element it writes <canvas> to the page as text?

var name = prompt("Enter your name: ");
document.getElementById("paragraph").innerHTML = name;

<p id="paragraph"></p>

Unfortunately I can't use jQuery, so a pure JS solution would be nice.

That works perfectly! Please add an answer with that information for quick future reference. — Jack Bashford
– Jack Bashford, Commented Sep 26, 2018 at 2:14

Mesar ali · Accepted Answer · 2018-09-26 02:43:16Z

1

You can use innerText, instead of innerHTML

 document.getElementById("paragraph").innerText = name;

answered Sep 26, 2018 at 2:43

Mesar ali

1,8982 gold badges18 silver badges20 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Arthur-1 · Accepted Answer · 2018-09-26 02:21:58Z

You want to 'escape' the input text before displaying it again.

Your JavaScript would now look like:

var name = escapeHtml(prompt("Enter your name: "));
document.getElementById("paragraph").innerHTML = name;

function escapeHtml(unsafe) {
    return unsafe
         .replace(/&/g, "&amp;")
         .replace(/</g, "&lt;")
         .replace(/>/g, "&gt;")
         .replace(/"/g, "&quot;")
         .replace(/'/g, "&#039;");
}

Note: This code snippet is from Can I escape html special chars in javascript?

PSA: Please don't use client-side sanitation of text for anything related to security.

Rather than answering with a reference to a duplicate, just mark it as a duplicate. ;-)

Collectives™ on Stack Overflow

How to turn HTML-format user input into text in prompt [duplicate]

2 Answers 2

Comments

2 Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Linked

Related