/** * Simple sanitization. It is not intended to sanitize * malicious element values. * * character | escaped * < < * > > * ( ( * ) ) * # # * & & * " " * ' ' */ var chars = { '<': '<', '>': '>', '(': '(', ')': ')', '#': '#', '&': '&', '"': '"', "'": ''' }; exports.sanitize = function sanitize(value) { if (typeof value !== 'string') { return value; } Object.keys(chars).forEach(function(key) { value = value.replace(key, chars[key]); }); return value; }