sanitizeFunction.js

    function sanitize(encodedString)
    {
        var str = encodedString;
        var message = str.replace(/%3C/gi, "&lt;"); //This one replaces < with &lt
        var message = message.replace(/%3E/gi, "&gt;"); //This one replaces > with &gt
        var message = message.replace(/%2F/gi, "&frasl;"); //This replaces the / sign with &frasl
        var message = message.replace(/%3B/gi, ";"); //This one allows ; to be decoded
        var message = message.replace(/</gi, "&lt;"); //This prevents nonencoded < to be used as &lt
        var message = message.replace(/>/gi, "&gt;"); //This prevents nonecoded > to be used as &gt
        var message = message.replace(/%26/gi, "&amp;"); //This one decodes & to &amp
        var message = message.replace(/%3F/gi, "?"); //this one decodes the ? sign
        var message = message.replace(/%3D/gi, "="); //This decodes the = sign
        var message = message.replace(/%40/gi, "@"); //This decodes the @ sign
        var message = message.replace(/%23/gi, "#"); //This decodes the # sign
        var message = message.replace(/%24/gi, "$"); //This decodes the $ sign
        var message = message.replace(/%2B/gi, "+"); //This decodes the + sign
        var message = message.replace(/%3A/gi, ":"); //This decodes the : sign
        //More replace options can be added to remove profanity from being used among other items depending on the users preference
        var message = decodeURI(message); //This one finishes the decoded resuming decoding anything that was not decoded previously.
        return message;
    }