Recursively Escape Objects/Arrays for HTML

Install:

$ npm install --save recursive-escape

Recursivly escapes strings in objects or arrays for safe output in HTML. The most common use case for this is to pass data from a server rendered app to the front-end. See recursive-unescape for use on the front-end when loading in the escaped data.

Usage:

var escape = require('recursive-escape');

var obj = {
	foo: 'My unsafe <script>alert("You have been hacked!!");</script> string.',
	number: 1,
	arr: ['foo', '<h1>Hi!!</h1>'],
	obj: {
		nested: {
			bar: '<'
		}
	}
};

var e = escape(obj);

console.log(e.toJSON(e, '\t'));
/*
Output:

{
	"foo": "My unsafe &lt;script&gt;alert(&quot;You have been hacked!!&quot;);&lt;/script&gt; string.",
	"number": 1,
	"arr": [
		"foo",
		"&lt;h1&gt;Hi!!&lt;/h1&gt;"
	],
	"obj": {
		"nested": {
			"bar": "&lt;"
		}
	}
}
*/