Making secure ajax calls with jQuery

Question

I noticed that some characters are entered into the text field and sent via the jQuery Ajax request since the parfut is not interpreted correctly. (at least from my point of view). "&" creates new unwanted parm. "+" Completely disappears.

I want to get the value of a text field and convert it to html objects. Something like this I think:

SafeParm = $ ("# myDIV"). val (). html ();

Any other recommendations on making secure ajax calls using jQuery are welcome.

Answer 1

use the escape function:

SafeParm = escape($("#myDIV").val().html());

Answer 2

encodeURIComponent - , . , escape , . .: http://xkr.us/articles/javascript/encode-compare/

Answer 3

You need to encode the parameters passed to the request.

See html coding with javascript escape and unescape

You can avoid $("#myDIV").val()where myDiv is the identifier of your text field.

Answer 4

escapeoutdated. Use encodeURIand encodeURIComponent.