如何转义 HTML 但不转义字符实体

Question

我必须转义一个任意字符串，然后分配给innerHTML。

但是字符串可能已经包含字符实体，例如

var str1 = "A & B & C";
var str2 = "A > B > C";
var str3 = "A&qout;B&qout; C &qout;";

我想得到

A & B & C 
A > B > C
A"B" C " 

问题是，如何转义"&"而不转义"&在其他字符实体中"？

Answer 1

首先取消转义，因此将&替换为 & ，然后转义。

例：

function unescapeHtml(unsafe) {
    return unsafe
         .replace(/&/g, "&")
         .replace(/&lt;/g, "<")
         .replace(/&gt;/g, ">")
         .replace(/&quot;/g, '"')
         .replace(/&#039;/g, "'")
      
}
function escapeHtml(unsafe) {
    return unsafe
         .replace(/&/g, "&amp;")
         .replace(/</g, "&lt;")
         .replace(/>/g, "&gt;")
         .replace(/"/g, "&quot;")
         .replace(/'/g, "&#039;");
}
function setText(id, text){
   document.getElementById(id).innerHTML = escapeHtml(unescapeHtml(text))
} 
var str1 = "A &amp; B & C";
var str2 = "A &gt; B > C";
var str3 = "A&amp;B&amp;C"
var str4 = "A&quot;B&quot; C &quot;"
   
setText("container1", str1); 
setText("container2", str2);
setText("container3", str3);
setText("container4", str4);

<div id="container1"></div>
<div id="container2"></div>
<div id="container3"></div>
<div id="container4"></div>

Answer 2

var str1 = "A & B & C";
var str2 = "A > B > C";
var str3 = "A & B & C > D < X";
str1 = str1.replace(/&/g, '&');
str2 = str2.replace(/>/g, '>');
str3 = str3.replace(/&amp;/g, '&').replace(/&gt;/g, '>').replace(/&lt;/g, '<');
console.log(str1);
console.log(str2);
console.log(str3);

https://jsfiddle.net/fkherav8/2/