• Escapes HTML entities in a string.

    Parameters

    • html: unknown

      The HTML string to escape.

    Returns string

    The sanitized HTML string.

    escapeHTML('<script>alert("XSS")</script>'), // "&lt;script&gt;alert(&#34;XSS&#34;)&lt;/script&gt;"
    
MMNEPVFCICPMFPCPTTAAATR