function escapeHtml(str) {
  return str
    .replace(/&/g, '&')
    .replace(/>/g, '>')
    .replace(/</g, '&lt;')
    .replace(/"/g, '&quot;')
    .replace(/'/g, '&#39;'); // Do not use "&apos;", IE does not support.
}