Escaping HTML entities in JavaScript string literals within the [removed] block

Question

On the one hand if I have

\';
console.log(s);

the browser will terminate the

Answer 1

The following characters could interfere with an HTML or Javascript parser and should be escaped in string literals: <, >, ", ', \, and &.

In a script block using the escape character, as you found out, works. The concatenation method (') can be hard to read.

var s = 'Hello <\/script>';

For inline Javascript in HTML, you can use entities:

click me

Demo: http://jsfiddle.net/ThinkingStiff/67RZH/

The method that works in both