HTML Escape / Unescape
Convert special characters to HTML entities and back. Essential for web development, preventing XSS attacks, and displaying code safely.
Escape mode: Converts <, >, &, ", ' to HTML entities
0 characters · 1 lines
0 characters · 1 lines
HTML Entities Explained
HTML entities are special codes that represent characters with special meaning in HTML. For example, the less-than symbol < starts an HTML tag, so to display it as text, you must use the entity <. This prevents the browser from interpreting it as code and ensures security against XSS (cross-site scripting) attacks.
Common use cases include displaying code snippets on web pages, sanitizing user input in forms, and preparing text for XML or HTML documents. Developers use HTML escaping to prevent malicious code injection, while unescaping is useful when processing data from APIs or databases that store pre-escaped content.