function htmlEscape(str) {
return String(str)
.replace(/&/g, '&')
.replace(/"/g, '"')
.replace(/'/g, ''')
.replace(/</g, '<')
.replace(/>/g, '>');
}
var path = '<div>hello world</div><p> </p>';
var res = htmlEscape(path);
console.log(res);