Javascript decoding html entities [duplicate]

Asked 23/5, 2012 at 8:1 Answered 23/5, 2012 at 8:5

Possible Duplicate:
How to decode HTML entities using jQuery?

I want to convert this text:

"&lt;p&gt;name&lt;/p&gt;&lt;p&gt;&lt;span style="font-size:xx-small;"&gt;ajde&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;da&lt;/em&gt;&lt;/p&gt;"

to html, with tags and everything in Javascript or Jquery. How to do this?

Corybantic answered 23/5, 2012 at 8:1 Comment(2)

your final export: <p>name</p><p><span style="font-size:xx-small;">ajde</span></p><p><em>da</em></p></body> – Mccurdy 23/5, 2012 at 8:7

Easiest way is to assign a class selector to your element and then use this code $('.selector').each(function(a,b){$(b).html($(b).text())}) – Majormajordomo 23/1, 2013 at 11:32

173

var text = '&lt;p&gt;name&lt;/p&gt;&lt;p&gt;&lt;span style="font-size:xx-small;"&gt;ajde&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;da&lt;/em&gt;&lt;/p&gt;';
var decoded = $('<textarea/>').html(text).text();
alert(decoded);

This sets the innerHTML of a new element (not appended to the page), causing jQuery to decode it into HTML, which is then pulled back out with .text().

Live demo.

Rosenkrantz answered 23/5, 2012 at 8:3 Comment(6)

What if the text is "><img src=x onerror=prompt(1)>? – Jedediah 20/11, 2013 at 8:56

don't use $('<div/>') - i't make posible XSS atack. Use $('<textarea/>'); – Frederickson 20/2, 2014 at 23:4

I'm not sure if this is also proper (I'm using jQuery 2.x): $.parseHTML(text)[0].textContent; – Titulary 9/3, 2015 at 4:8

When encoded string contains Enter sign between tags, this returns just Enter instead of html (at least in Chrome). to fix it I changed solution to $('<textarea/>').html(text).html() – Huckaback 6/10, 2015 at 10:21

It's a very bad idea because is allowing HTML injection. for example if in the incoming text you have something like this: <script>alert(code injection')</script> it will show an alert on the user screen. – Naturalist 3/5, 2019 at 9:47

that's why you have to sanitize the text first <script> will become <script> when sanitized and when applied to above code, it will be back to <script> but as a text – Angadreme 21/7, 2023 at 3:50

There is a jQuery solution in this thread. Try something like this:

var decoded = $("<div/>").html('your string').text();

This sets the innerHTML of a new <div> element (not appended to the page), causing jQuery to decode it into HTML, which is then pulled back out with .text().

Enclosure answered 23/5, 2012 at 8:3 Comment(1)

not working in firefox – Mandatory 16/1, 2015 at 10:40

Using jQuery the easiest will be:

var text = '&lt;p&gt;name&lt;/p&gt;&lt;p&gt;&lt;span style="font-size:xx-small;"&gt;ajde&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;da&lt;/em&gt;&lt;/p&gt;';

var output = $("<div />").html(text).text();
console.log(output);

DEMO: http://jsfiddle.net/LKGZx/

Csc answered 23/5, 2012 at 8:4 Comment(1)

Same as the other two answers. You'll get a badge of honor if you delete the answer :) – Erlin 30/1, 2014 at 11:14

I think you are looking for this ?

$('#your_id').html('&lt;p&gt;name&lt;/p&gt;&lt;p&gt;&lt;span style="font-size:xx-small;"&gt;ajde&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;em&gt;da&lt;/em&gt;&lt;/p&gt;').text();

Propjet answered 23/5, 2012 at 8:5 Comment(0)

Recommended topics

Hot tags