Prevent Javascript execution in jQuery html()

Question

I have a div that contains some html and a lot of Javascript

<div id="mydiv">
<p>Hello Philippines</p> my first time in Philippines is nice
<script type="text/javascript">alert("how was it became nice?");</script>
well I experienced a lot of things
<script type="text/javascript">alert("and how about your Japan's trip?");</script>
well its more nicer ^^ but both countries are good! hahah
</div>

I want to put the non-Javascript code and Javascript code in two separate variables:

var html = $("#mydiv").html();

My problem here is that my javascript is executing, which makes me stop to create the code I want which is the storing of javascript and non-javascript to two different variables.

how can I stop the javascript codes from executing when they are get inside the div?
how can I store the javascript and non-javascript code into two different variables safely?

NOTE: I need the stored javascript for later execution

Put your javascript code inside the funciton. They won't be executed until they have been called. — Jonas T
– Jonas T, Commented Jul 7, 2012 at 9:10
1) use text instead of html, 2) you probably need some regex to separate them — Zbigniew
– Zbigniew, Commented Jul 7, 2012 at 9:12
when are you going to run the javascript? your script will run on page load that what i see. — Bob
– Bob, Commented Jul 7, 2012 at 9:12
well i was able to think about it but the problem here is the javascript is end-user defined code and I can't let them type the function every time — Netorica
– Netorica, Commented Jul 7, 2012 at 9:12
well there is an user-event(a button click) that the javascript code will be executed as the end-user's desire — Netorica
– Netorica, Commented Jul 7, 2012 at 9:15

Ram · Accepted Answer · 2012-07-07 09:27:48Z

2

you can use code tag instead of script:

html:

<div id="mydiv">
<p>Hello Philippines</p> my first time in Philippines is nice</p>
<code>alert("how was it became nice?");</code>
well i experienced a lot of things
<code>alert("and how about your Japan's trip?");</code>
<p>well its more nicer ^^ but both countries are good! hahah
</p>
</div>

js:

var html = $('#mydiv *').not('code').html()
var code = $('#mydiv code').text()

http://jsfiddle.net/dMDy5/3/

edited Jul 7, 2012 at 9:27

answered Jul 7, 2012 at 9:14

Ram

145k16 gold badges174 silver badges201 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Netorica Over a year ago

hehe you just gave me the answer! well thank you ^^ but is there any workaround to handle with script tags instead of code tags?

Collectives™ on Stack Overflow

Prevent Javascript execution in jQuery html()

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related