MDN Web Docs @mdn@mastodon.social
Public

Safely embed user input in regex patterns 🔐

RegExp.escape() escapes regex syntax characters in a string, so you can use user-provided text as a literal pattern.

Prevents unexpected regex behavior and security issues when dynamically creating RegExp patterns.

Learn more here 👇
developer.mozilla.org/en-US/do

The MDN logo

RegExp.escape() - JavaScript | MDN

The RegExp.escape() static method escapes any potential regex syntax characters in a string, and returns a new string that can be safely used as a literal pattern for the RegExp() constructor.

developer.mozilla.org · MDN Web Docs

0
0
0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.social/users/mdn/statuses/116102372342711050 on your instance and quote it. (Note that quoting is not supported in Mastodon.)