method

escapeElement

v1_9_3_392 - Show latest stable - Class: CGI

escapeElement(string, *elements)

public

Escape only the tags of certain HTML elements in string.

Takes an element or elements or array of elements. Each element is specified by the name of the element, without angle brackets. This matches both the start and the end tag of that element. The attribute list of the open tag will also be escaped (for instance, the double-quotes surrounding attribute values).

print CGI::escapeElement('<BR><A HREF="url"></A>', "A", "IMG")
  # "<BR><A HREF="url"></A&gt"

print CGI::escapeElement('<BR><A HREF="url"></A>', ["A", "IMG"])
  # "<BR><A HREF="url"></A&gt"

# File lib/cgi/util.rb, line 109
  def CGI::escapeElement(string, *elements)
    elements = elements[0] if elements[0].kind_of?(Array)
    unless elements.empty?
      string.gsub(/<\/?(?:#{elements.join("|")})(?!\w)(?:.|\n)*?>/) do
        CGI::escapeHTML($&)
      end
    else
      string
    end
  end

escapeElement

Related methods