package html/template
HTMLEscapeString returns the escaped HTML equivalent of the plain text data s (1st parameter).
Golang html/template.HTMLEscapeString function usage example
package main
import (
"fmt"
"html/template"
)
func main() {
s := "<script>alert('xss attack!')</script>"
final := template.HTMLEscapeString(s)
fmt.Println(final)
}
Output :
<script>alert('xss attack!')</script>
Reference :
http://golang.org/pkg/html/template/#HTMLEscapeString
