HTML Entities Encode and Decode
Convert special characters such as <, > and & to HTML entities, or decode named and numeric entities back to text. Runs in your browser.
Convert special characters such as <, > and & to HTML entities, or decode named and numeric entities back to text. Runs in your browser.
HTML treats characters like <, > and & as markup. To show them as text you replace them with entities such as <, > and &. Escaping also protects pages from injected markup when you display user input.
This tool encodes those characters and decodes named entities (like ©) and numeric entities (like © or 😀).
Input: <p>Tom & Jerry</p> Output: <p>Tom & Jerry</p>
All numeric entities, and the commonly used named ones such as &, <, >, ", , © and €. Unknown names are left unchanged.
Escaping is one important part of preventing XSS, but how you escape depends on where the text is placed (HTML body, attribute, script). Use your framework's escaping.
Useful when a system cannot handle UTF-8. Each character becomes a numeric entity such as é.
No. It stays in your browser.