javascript single quotes being escaped

Question

A guy I'm helping out is using an ecommerce CMS (CSCart). Their code is escapes single quotes for security reasons I presume (I'm not very good with js).

<script>
function share_click()
{

  RPXNOW.loadAndRun(['Social'], function () {  <--- This line gets escaped around social
    var activity = new RPXNOW.Social.Activity(
       "Share your comment",
       "commented on 'Like My New Perfume?' on cuteoverload.com",  <--- This line as well
       "http://cuteoverload.com/2009/10/26/like-my-new-perfume/");

    RPXNOW.Social.publishActivity(activity,
      {finishCallback:function(data){
        window.location = "http://google.com/"
      }
    });
  });

}
</script>

Any ideas how I can work around this?

Or `function share_click() { var arr = ["Social"]; RPXNOW.loadAndRun(arr),...` — mplungjan, Apr 09 '12 at 16:33
boo... I thought I tried double quotes before asking. Guess not. Thanks all — Kyle Parisi, Apr 09 '12 at 16:55

score 0 · Answer 1 · answered Apr 09 '12 at 16:29

0

Try using :

 &apos;

instead of '

Or as someone else had commented the \' usually keeps the apostrophe from breaking.

answered Apr 09 '12 at 16:29

jveselka

88
6

score 0 · Answer 2 · answered Apr 09 '12 at 16:35

try

<script>
function share_click() {
  var arr = ["Social"];

  RPXNOW.loadAndRun(arr, function () {  
    var activity = new RPXNOW.Social.Activity(
       "Share your comment",
       "commented on `Like My New Perfume?` on cuteoverload.com",  
       "http://cuteoverload.com/2009/10/26/like-my-new-perfume/");

    RPXNOW.Social.publishActivity(activity,
      {finishCallback:function(data){
        window.location = "http://google.com/"
      }
    });
  });

}
</script>

score 0 · Accepted Answer · answered Apr 09 '12 at 16:47

Just use double quotes. If your example is accurate, the double quotes around "http://google.com/" don't get escaped, right? So, problem solved.

And as to the single quotes inside the double-quoted string, do these cause problems if they're escaped? I tried, but I can't find a difference in behaviour whether those inner quotes are escaped or not.

javascript single quotes being escaped

3 Answers3