JSFiddle - React, Tailwind, and code Playground

HTML

<div id="unescaped"></div>
<div id="escaped"></div>

JavaScript

function htmlEncode(str) {
    return String(str)
            .replace(/&/g, '&amp;')
            .replace(/"/g, '&quot;')
            .replace(/'/g, '&#39;')
            .replace(/</g, '&lt;')
            .replace(/>/g, '&gt;');
}


var myStr = "&lt;script&gt;alert('injection');&lt;/script&gt;";

$('#unescaped').html(myStr);
$('#escaped').html(htmlEncode(myStr));