javascript - What do I need to escape in my HTML (JSON response) - Stack Overflow

admin管理员组

文章数量:1345295

My JSON response looks like:

{rc: "200", test: "", user: "<div class='sub1'>
                <div class='avatar'>                    
                    <a href='/blah'>blah</a><br />
                    <strong>0</strong>
                </div>
                <div class='sl'>
                    <p>
                        you droppped the ball this time
                    </p>
                </div>
                <div class='clear'>
                </div>                        
            </div>"}

Update

I updated my code to put quotes on the key values, still doesn't work:

{"rc": "200", "m" : "", "o": "<div class='s1'>
            <div class='avatar'>                    
                <a href='\/asdf'>asdf<\/a><br \/>
                <strong>0<\/strong>
            <\/div>
            <div class='sl'>
                <p>
                    444444444
                <\/p>
            <\/div>
            <div class='clear'>
            <\/div>                        
        <\/div>"}

My JSON response looks like:

{rc: "200", test: "", user: "<div class='sub1'>
                <div class='avatar'>                    
                    <a href='/blah'>blah</a><br />
                    <strong>0</strong>
                </div>
                <div class='sl'>
                    <p>
                        you droppped the ball this time
                    </p>
                </div>
                <div class='clear'>
                </div>                        
            </div>"}

Update

I updated my code to put quotes on the key values, still doesn't work:

{"rc": "200", "m" : "", "o": "<div class='s1'>
            <div class='avatar'>                    
                <a href='\/asdf'>asdf<\/a><br \/>
                <strong>0<\/strong>
            <\/div>
            <div class='sl'>
                <p>
                    444444444
                <\/p>
            <\/div>
            <div class='clear'>
            <\/div>                        
        <\/div>"}

• javascript
• asp-mvc
• json

Share Improve this question Follow edited Jun 15, 2009 at 2:33 mrblah asked Jun 14, 2009 at 22:56 mrblahmrblah 104k142142 gold badges317317 silver badges424424 bronze badges 3

• nothing in this example. – Itay Moav -Malimovka Commented Jun 14, 2009 at 23:02
• possible duplicate of In jQuery, I am returning HTML in a JSON result, what do I have to escape? – John Commented Apr 11, 2012 at 10:18
• test it with jsonformatter.curiousconcept. to check which lines are breaking. new line (\n) can be a problem – Junior Mayhe Commented Sep 23, 2012 at 20:20

Add a ment  | 

4 Answers 4

Sorted by: Reset to default 4

I used jsonlint to validate your latest example, and the line breaks are what it flagged. When they were removed, it validated.

{
    "rc": "200",
    "m" : "",
    "o": "<div class='s1'><div class='avatar'><a href='\/asdf'>asdf<\/a><br \/><strong>0<\/strong>      <\/div>    <div class='sl'><p>444444444<\/p><\/div><div class='clear'><\/div><\/div>"
}

In your example, you won't have to escape anything. But, if the HTML es with double quotes, you'll have to escape them, obviously.

You're HTML values are OK, but the keys of the JSON object must be enclosed in quotes.

From the JSON RFC:

2.2. Objects

An object structure is represented as a pair of curly brackets
surrounding zero or more name/value pairs (or members). A name is a
string.

and

2.5. Strings

The representation of strings is similar to conventions used in the C
family of programming languages. A string begins and ends with
quotation marks.

Also, if you output this JSON object inside the script tags of an HTML page, you must escape the "</" sequence of HTML closing tags, as per this appendix in the HTML 4 specification.

You don't need to escape HTML in a javascript string. What exactly are you trying to do/what is the problem? Take a look at the escape() function - it might help.

本文标签： javascriptWhat do I need to escape in my HTML (JSON response)Stack Overflow