HTML Entity

&	&
<	&lt;
>	&gt;
"	&quot;
'	&#x27;
/	&#x2F;

参考资料

[1]. https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet
[2]. http://en.wikipedia.org/wiki/Percent-encoding