• Escapes HTML entities in a string.

    Parameters

    • html: unknown

      The HTML string to escape.

    Returns string

    The sanitized HTML string.

    escapeHTML('<script>alert("XSS")</script>'), // "&lt;script&gt;alert(&quot;XSS&quot;)&lt;/script&gt;"
    
MMNEPVFCICPMFPCPTTAAATR