javascript htmlentities

Many people think that htmlentities and htmlspecialchars function is the same, are formatted HTML code, I used to think so, but today I found that is not the case.The translations performed is:Copy CodeThe code is as follows:' & ' (ampersand)

The translations performed are: Copy Code code as follows: ' & ' (ampersand) becomes ' & ' ' "' (double quote) becomes '" ' when ent_noquotes are not set. ' (single quote) becomes ' "is set. ' ' > ' (greater than) becomes ' > '

The translations performed is: Copy CodeThe code is as follows: ' & ' (ampersand) becomes ' & ' ' ' ' (double quote) becomes ' "When Ent_noquotes was not set. "(single quote) becomes" only if Ent_quotes is set. ' ' > ' (greater than) becomes ' > '

The translations saved med are: CopyCode The Code is as follows: '&' (ampersand) becomes '&' '"' (Double quote) becomes '" 'when ent_noquotes is not set. ''' (Single quote) becomes ''' only when ent_quotes is set. ''>' (Greater than) becomes '>'

${content}

Many people think that htmlentities and htmlspecialchars have the same functions and are used to format html code. I used to think so, but today I found this is not the case. The translations saved Med are: The code is as follows: '&' (Ampersand)

Update20151202: Thank you for your attention and answers. The defense methods I have learned from various methods are as follows: PHP outputs html directly, and the following methods can be used for filtering: {code ...} if PHP is output to JS Code

In the morning, I saw the article "javascript Weekly Guide" [Phase 3], which contains an articleArticle(Extending JavaScript-the right way), I think it is not bad. I will share the translation with you. This article is not translated word by word

Update20151202:Thank you for your attention and answer, at present I learned from various ways of defense methods, organized as follows:

JavaScript already has many powerful built-in methods, but sometimes you don't need a function in the built-in method, how can we elegantly expand The JavaScript function? In The morning, I saw The article Extending JavaScript-The Right Way, the