I am doing a little preview box for visitors writing comments on a part of the website and whenever onkeyup then it updates the preview with whatever they inputted.

This is fine, however it allows HTML characters and embeds tags so I'm just wondering if there's a way for Javascript to convert special and possibly troublesome characters like < and > to be properly parsed into the preview and not embedded into the source?

Thanks

you could strip the tags. heres a tutorial http://zamov.online.fr/EXHTML/DHTML/DHTML_983246.html

No, isn't there anything in Javascript that can do what htmlspecialchars() in PHP does?