Home/ Questions/Q 6100423
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-23T13:23:05+00:00

Is php htmlspecialchars safety for JS? var jsVar = <?php echo(str_replace(array(\r\n, \n,\r), \\n,htmlspecialchars($_GET[‘p’], ENT_QUOTES)));

  • 0

Is php htmlspecialchars safety for JS?

var jsVar = "<?php echo(str_replace(array("\r\n", "\n","\r"), "\\n",htmlspecialchars($_GET['p'], ENT_QUOTES))); ?>";

How about for multi byte chars?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    No. For that you’d use json_encode (JSON = Javascript notation).

    var foo = <?php echo json_encode('Foo "Bar" Baz'); ?>;

    htmlspecialchars escapes characters that have a special meaning in HTML. Javascript literals have other special characters you need to take care of, so HTML escaping doesn’t make sense.

    • 0