function escape2Html(str) {
var arrEntities={'lt':'<','gt':'>','nbsp':' ','amp':'&','quot':'"','#x2F':'/','#x27':'\''};
return str.replace(/&(lt|gt|nbsp|amp|quot|#x2F|#x27);/ig,function(all,t){return arrEntities[t];});
var arrEntities={'lt':'<','gt':'>','nbsp':' ','amp':'&','quot':'"','#x2F':'/','#x27':'\''};
return str.replace(/&(lt|gt|nbsp|amp|quot|#x2F|#x27);/ig,function(all,t){return arrEntities[t];});
}
<script>alert(cc试试test')</script>
!@#¥%……&*()“”''?><