Back to home

HTML Entity Encode / Decode

Escape & < > and friends, or decode named and numeric entities

Text
0 chars0 bytes0 lines
Escaped
The result shows up here

Powered by he: all 2200+ HTML5 named entities (&hellip;, &thetasym;, &frac34;…) plus decimal and hex numeric references.

FAQ

Why escape HTML entities?

Characters like < > & carry markup meaning and would be parsed as tags; escaped as &lt; &gt; &amp; they display as plain text.

Does escaping prevent XSS?

Escaping untrusted input before inserting it into HTML is a core XSS defense, but attributes, scripts and URLs each have their own rules — it is not the only layer you need.