I use this method to escape strings of HTML code on client side:function escapeHTML(str){var div = doc