velt/text: HTML escaping#

import { escapeHtml } from "velt/text". Escapes text for HTML element content and quoted attribute values in one pass: &, <, >, " and ' become &, <, >, " and '; everything else (including non-ASCII) is kept.

import { escapeHtml } from "velt/text";

const name = `<b>"Tom" & 'Jerry'</b>`;
console.log(`<td title="${escapeHtml(name)}">${escapeHtml(name)}</td>`);
// <td title="&lt;b&gt;&quot;Tom&quot; &amp; &#39;Jerry&#39;&lt;/b&gt;">&lt;b&gt;&quot;Tom…</td>

JSX escapes text and attribute values itself (velt/jsx); escapeHtml is for HTML built as strings.