Which characters to escape in string consisting of HTML tags and attributes?
<p>I have a document.write statement that I'm using to write some HTML. My question is, do I need to escape anything more than the / and "" ?</p>

<pre><code>document.write('&lt;div style=\"display:none;\"&gt;&lt;\/div&gt;');
</code></pre>
