/*! * EJS * Copyright(c) 2010 TJ Holowaychuk * MIT Licensed */ /** * Escape the given string of `html`. * * @param {String} html * @return {String} * @api private */ exports.escape = function(html){ return String(html) .replace(/&(?!\w+;)/g, '&') .replace(//g, '>') .replace(/"/g, '"'); };