encodeURI(userInput);// Get user input var userInput = document.getElementById("user-input").value; // Encode user input var encodedInput = encodeURI(userInput); // Insert encoded input into the page document.getElementById("display-input").innerHTML = encodedInput; <meta http-equiv="Content-Security-Policy" content="script-src 'self' https://apis.google.com"> Checker = new RegExp(`<[^>]*script`).test(`<script>`) console.log(Checker)