把json对象里的string类型的值,进行html转义。思路是,遍历json对象所有的string类型的value值,对其进行转义。
var html = (function(){
var inst;
var obj = (function(){});
var create = function(){
if(!inst){
inst = new obj();
}
return inst;
}
//转义json的html值
obj.prototype.EscapeJsonValue = function(json){
if(json instanceof Array){
for(var i = 0;i < json.length; i++) {
var item = json[i];
inst.EscapeJsonValue(item);
}
}else if(json instanceof Object){
for (var key in json) {
var val = json[key]
if(typeof(val) === "string"){
json[key] = inst.htmlEscape(val);
}else{
inst.EscapeJsonValue(val);
}
}
}
}
//转义html文本
obj.prototype.htmlEscape = function(str){
if(!str) return "";
return str.replace(/[<>&"']/g,function(c){
return {'<':'<','>':'>','&':'&','"':'"','\'':'''}[c];
});
}
//反转义html文本
obj.prototype.htmlUnEscape = function(str){
var arrEntities={'lt':'<','gt':'>','nbsp':' ','amp':'&','quot':'"','#39':'\''};
return str.replace(/&(lt|gt|nbsp|amp|quot|#39);/ig,function(all,t){
return arrEntities[t];
});
}
return {create: create};
})().create();
//调用
var json = [{'a':'b','c':'\'</script>'},{'aaa':[{'zz':'xx'}],'ddd':{'222':'"sss"'}}];
html.EscapeJsonValue(json);
console.log(json);