Function htmlescape::encode_attribute [] [src]

pub fn encode_attribute(s: &str) -> String

HTML entity-encodes a string for use in attributes values.

Entity-encodes a string using an extensive set of entities, giving a string suitable for use in HTML attribute values. All entities from encode_minimal are used, and further, all non-alphanumeric ASCII characters are hex-encoded (&#x__;). See the OWASP XSS Prevention Cheat Sheet for more information on entity-encoding for attribute values.

Arguments

  • s - The string to encode.

Return value

The encoded string.

Example

let encoded = htmlescape::encode_attribute("\"No\", he said.");
assert_eq!(&encoded, ""No", he said.");