CODE EXAMPLE FOR JAVASCRIPT

escape xss javascript

function htmlEncode(str){
  return String(str).replace(/[^w. ]/gi, function(c){
     return '&#'+c.charCodeAt(0)+';';
  });
}