htmlentities not working

[robert_gsfame]

i have this function to do the prevent html injection

 

function htmlentities(str) {

    var i,output='',len,char='';

    len = str.length;

    for(i=0;i47 && char<58)||(char>62 && char<127) ){

            output += str;

        }else{

            output += "&#" + str.charCodeAt(0) + ";";

        }

    }

    return output;

}

 

but this is not working,anyone got an idea??

 

thx

[xenophobia]

Before digging into what you're trying to do now, is that a reason to have a client script to escape your HTML string?

Usually we do on server side before output to the client.