HTML-encoding lost when attribute read from input field

Question

I’m using JavaScript to pull a value out from a hidden field and display it in a textbox. The value in the hidden field is encoded.

For example,

Answer 1

';
console.log(aString.htmlEncode());

Will output: <script>alert("I hack your site")</script>

.htmlEncode() will be accessible on all strings once defined.