之所以写这个，是因为发现SQL注入和XSS中经常利用十六进制表示的字符串，比如
SELECT CONCAT(0x68656c6c6f);
得到的是hello
<!DOCTYPE html> <html> <head> <title>Hex-Char Bi-Converter</title> </head> <body> <div> <label for="from">String</label> <input type="text" /> <input type="button" value="<=>" /> <label for="to">Hex</label> <input type="text" /> <input type="button" value="Convert" /> </div> <script type="text/javascript" src="https://www.jb51.net/js/jquery-1.9.1.min.js"></script> <script type="text/javascript"> var curMode = 0; // curMode: 0 represents String to Hex, 1 from Hex to String var fromToLabelArray = ["Hex", "String"]; $(function() { $("#convert").click(function() { var fromVal = $("#from").val(); var toVal = curMode === 0 ? strToHexCharCode(fromVal) : hexCharCodeToStr(fromVal); $("#to").val(toVal); }); $("#exchange").click(function() { $("#fromLabel").text(fromToLabelArray[curMode]); $("#toLabel").text(fromToLabelArray[1-curMode]); curMode = 1 - curMode; }); }); function strToHexCharCode(str) { if(str === "") return ""; var hexCharCode = []; hexCharCode.push("0x"); for(var i = 0; i < str.length; i++) { hexCharCode.push((str.charCodeAt(i)).toString(16)); } return hexCharCode.join(""); } function hexCharCodeToStr(hexCharCodeStr) { var trimedStr = hexCharCodeStr.trim(); var rawStr = trimedStr.substr(0,2).toLowerCase() === "0x" ? trimedStr.substr(2) : trimedStr; var len = rawStr.length; if(len % 2 !== 0) { alert("Illegal Format ASCII Code!"); return ""; } var curCharCode; var resultStr = []; for(var i = 0; i < len;i = i + 2) { curCharCode = parseInt(rawStr.substr(i, 2), 16); // ASCII Code Value resultStr.push(String.fromCharCode(curCharCode)); } return resultStr.join(""); } </script> </body> </html>