Skip to main content

escape_js_string

Function escape_js_string 

Source
pub fn escape_js_string(input: &str) -> String
Expand description

Escape a string for safe interpolation into JavaScript code.

This prevents CSS selector injection attacks when user-supplied selectors are interpolated into JavaScript strings. It escapes characters that could break out of a JS string literal or inject malicious code.

ยงExample

use adk_browser::escape_js_string;

let safe = escape_js_string("div[data-id='test']");
assert!(safe.contains("\\'"));  // single quotes are escaped