cgiEscape - HTML escape certain characters in a string
Contents
Description
This function returns a pointer to a sanitised string. It converts <, & and > into HTML entities so that
the result can be displayed without any danger of cross-site scripting in a browser. The result may be
passed to free(3) after use. This routine is meant to be called before any user provided strings are
returned to the browser.
Name
cgiEscape - HTML escape certain characters in a string
Return Value
cgiEscape() returns a pointer to the sanitised string or NULL in case of error.
See Also
free(3). CGI Library 6 April 2008 cgiDebug(3)
Synopsys
#include<cgi.h>char*cgiEscape(char*string);
