function escapeHTML(unsafe) { return unsafe .replace(/&/g,'&') .replace(//g, '>') .replace(/"/g, '"') .replace(/'/g, '''); }