added util::attr_escape

escaping string for inclusion into x(ht)ml attributes

Signed-off-by: Michael Krelin <hacker@klever.net>

2 files changed, 26 insertions, 0 deletions

diff --git a/include/opkele/util.h b/include/opkele/util.h
index 6f3ddf6..719f951 100644
--- a/include/opkele/util.h
+++ b/include/opkele/util.h
@@ -102,2 +102,9 @@ namespace opkele {
         /**
+         * Make string suitable for using as x(ht)ml attribute.
+         * @param str string to escape
+         * @return escaped string
+         */
+        string attr_escape(const string& str);
+
+        /**
          * Convert number to string
diff --git a/lib/util.cc b/lib/util.cc
index 54d6535..b7bc437 100644
--- a/lib/util.cc
+++ b/lib/util.cc
@@ -163,2 +163,21 @@ namespace opkele {
 
+        string attr_escape(const string& str) {
+            static const char *unsafechars = "<>&\n\"'";
+            string rv;
+            string::size_type p=0;
+            while(true) {
+                string::size_type us = str.find_first_of(unsafechars,p);
+                if(us==string::npos) {
+                    if(p!=str.length())
+                        rv.append(str,p,str.length()-p);
+                    return rv;
+                }
+                rv.append(str,p,us-p);
+                rv += "&#";
+                rv += long_to_string((long)str[us]);
+                rv += ';';
+                p = us+1;
+            }
+        }
+
         string long_to_string(long l) {