X-Git-Url: https://ruin.nu/git/?p=ndwebbie.git;a=blobdiff_plain;f=database%2Ffunctions%2Fescape_html.sql;fp=database%2Ffunctions%2Fescape_html.sql;h=1c58cdb831789160ce3d25df2d152d2d87840955;hp=0000000000000000000000000000000000000000;hb=d8c6f0648fbd22c5c71163d3e712ae16c969e376;hpb=b8b4989cd6ad0d0a3f45f6a7972293f79aadd087

diff --git a/database/functions/escape_html.sql b/database/functions/escape_html.sql
new file mode 100644
index 0000000..1c58cdb
--- /dev/null
+++ b/database/functions/escape_html.sql
@@ -0,0 +1,13 @@
+CREATE OR REPLACE FUNCTION escape_html(_unescaped text) RETURNS text
+    AS $_$
+DECLARE
+BEGIN
+	_unescaped := replace(_unescaped, '&', '&');
+	_unescaped := replace(_unescaped, '"', '"');
+	_unescaped := replace(_unescaped, '<', '&lt;');
+	_unescaped := replace(_unescaped, '>', '&gt;');
+	RETURN _unescaped;
+END;
+$_$
+    LANGUAGE plpgsql IMMUTABLE;
+