avoid injection attack form < replace js code example

Example: avoid html injection

//You can encode the "<" and ">" to their HTML equivelant
html = html.replace(/</g, "<").replace(/>/g, ">");