HTML Escape / Unescape
Escape or restore HTML special characters to inspect entities and template content.
0 chars
Your text is processed only in this browser.
Enter text to update the result automatically.
HTML entity escape and unescape
Convert characters such as &, <, >, and quotes to HTML entities, or restore entities to text. This is useful for checking templates and content encoding. Safety still depends on the output context: HTML, attributes, JavaScript, and URLs require different handling.
Does HTML escaping completely prevent XSS?
No single escaping step can guarantee that. Escaping must match the output context; HTML text, attributes, JavaScript, and URLs each need different safety handling.