Ektron® eWebEditPro Developer's Reference Guide

Integrating eWebEditPro Using JavaScript
This problem occurs because the browser cannot distinguish between one of
these characters and the delimiters of the value attribute.
Also, if you use single quotes to delimit the value attribute, which is not
recommended, you need to encode all single-quote characters.
To solve this problem, you must encode these characters when storing them in a
hidden field. You would insert the character’s entity or character reference in
place of the actual character in the value field.
The following table lists the characters and corresponding entity and character
reference values.
Character Entity Character
Reference
NOTE The order in which characters are encoded is important. The ampersand (&) must
be encoded before you encode the other characters.
How the Server Converts Characters
Comments
& & & Must be encoded first.
> < <
< &gt; &#62;
" &quot; &#34; Value attribute must be quoted
with ", not '.
Your Web application server must convert these characters. For example, ASP
offers the Server.HTMLEncode function. If your environment does not provide
such a function, you need to write it. It is straightforward and requires the use of a
string substitution function. The pseudo code to encode these characters appears
below.
String strContent
strContent = ReplaceString(strContent, "&", "&amp;")
strContent = ReplaceString(strContent, "", "&gt;")
strContent = ReplaceString(strContent, """, "&quot;")
Ektron® eWebEditPro Developer’s Reference Guide, Release 5.1, Revision 1 570