Escape Character in SQL Server

To escape ‘ you simly need to put another before: ” As the second answer shows it’s possible to escape single quote like this: result will be If you’re concatenating SQL into a VARCHAR to execute (i.e. dynamic SQL), then I’d recommend parameterising the SQL. This has the benefit of helping guard against SQL injection … Read more

What characters must be escaped in HTML 5?

The specification defines the syntax for normal elements as: Normal elements can have text, character references, other elements, and comments, but the text must not contain the character U+003C LESS-THAN SIGN (<) or an ambiguous ampersand. Some normal elements also have yet more restrictions on what content they are allowed to hold, beyond the restrictions imposed by … Read more