escapeHtml function

String escapeHtml(
  1. String input
)

Escapes special HTML characters in text content and attribute values to prevent XSS.

Encodes & (&amp;), < (&lt;), > (&gt;), " (&quot;), and ' (&#x27;). This function is applied automatically during SSR rendering for all element text nodes, class names, style strings, and attribute values.

final safe = escapeHtml('<script>alert("xss")</script>');
// Returns: '&lt;script&gt;alert(&quot;xss&quot;)&lt;/script&gt;'

Implementation

String escapeHtml(String input) {
  return escapeBloomHtml(input);
}