debian man page for cgiescape

cgiDebug(3)							Programmer's Manual						       cgiDebug(3)

NAME
       cgiEscape - HTML escape certain characters in a string

SYNOPSYS
       #include <cgi.h>

       char *cgiEscape (char *string);

DESCRIPTION
       This function returns a pointer to a sanitised string.  It converts <, & and > into HTML entities so that the result can be displayed with-
       out any danger of cross-site scripting in a browser.  The result may be passed to free(3) after use.  This routine is meant  to	be  called
       before any user provided strings are returned to the browser.

RETURN VALUE
       cgiEscape() returns a pointer to the sanitised string or NULL in case of error.

AUTHOR
       This CGi library is written by Martin Schulze <joey@infodrom.org>.  If you have additions or improvements please get in touch with him.

SEE ALSO
       free(3).

CGI Library							   6 April 2008 						       cgiDebug(3)