Escapes HTML entities (&, <, >, ", ') for Telegram's HTML parse mode.
&
<
>
"
'
Raw unescaped string.
Safely escaped string for HTML formatting.
const safeHtml = escapeHtml("<script>alert('xss') & win</script>");// Returns: "<script>alert('xss') & win</script>" Copy
const safeHtml = escapeHtml("<script>alert('xss') & win</script>");// Returns: "<script>alert('xss') & win</script>"
Escapes HTML entities (
&,<,>,",') for Telegram's HTML parse mode.