Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

JavaScript: URL Encode All Non-whitelisted Characters Using _ instead of %

Posted on 2013-11-06
1
Medium Priority
?
289 Views
Last Modified: 2013-11-07
I want JavaScript functions that will work just like escape() and unescape() that use an underscore instead of a percent and encode all non-whitelisted charachters.

My function below does not work, as the example demonstrates:
http://jsfiddle.net/XVqeR/

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta charset="utf-8" />
<title>Demo</title>
</head>
<body>

<script type="text/javascript">
//<![CDATA[
// Thanks, leakim971
var x = 'A _test_ "1-2-3" 50%';
alert('The fist and last line should be the same:\n\n'+x+'\n'+escapeNonWhitelistedU(x)+'\n'+unescapeU(escapeNonWhitelistedU(x)));


function escapeNonWhitelistedU(str) {
    var escapechar = "%";
    var whitelist = "bcdefghijklmnopqrstuvwxyzBCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_";
    return str.replace(/(.)/g,function($1) { return whitelist.indexOf($1)<0?escapechar+$1.charCodeAt(0).toString(16):$1; });
}

function unescapeU(str) {
 return unescape(str.replace(/_/g,"%"));
}

//]]>
</script>
</body>
</html>

Open in new window

0
Comment
Question by:hankknight
1 Comment
 
LVL 83

Accepted Solution

by:
leakim971 earned 2000 total points
ID: 39629164
your escape character CAN'T be in your whitelist else how to differentiate both?

the same way escape convert % to %25

you should use a char not in your whitelist so you know when you found it it's the escape char
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
This article discusses how to create an extensible mechanism for linked drop downs.
The viewer will learn the basics of jQuery, including how to invoke it on a web page. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery.: (CODE)
The viewer will learn the basics of jQuery including how to code hide show and toggles. Reference your jQuery libraries: (CODE) Include your new external js/jQuery file: (CODE) Write your first lines of code to setup your site for jQuery…
Suggested Courses

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question