Js-Html 前端系列--顯示有格式的文本

---

var dp = $("#dp").val();
        var dpXSS = filterXss(dp);
        document.getElementById("description").innerHTML= "<p>"+dpXSS+"</p>";
        function filterXss(content){
            var str = content.split("");
            for(var i=0;i<str.length;i++){
                switch(str[i]){
                    case '&amp;': str[i] = "&";break;
                    case '&lt;': str[i] = "<";break;
                    case '&gt;': str[i] = ">";break;
                    case '&quot;': str[i] = "\"";break;
                    case '&apos;': str[i] = "'";break;
                    default:break;
                }
            }
            return str.join("");
        }