Escape a snippet
Input: <b>Tom & Jerry</b>
Output: <b>Tom & Jerry</b>
Encoding
Escape common HTML characters or unescape named and numeric entities.
Entity escaping is not an XSS sanitizer. Review unsafe HTML before rendering it in an application.
Runs in your browser. Input is not uploaded or sent to an external API.
Escape the common characters that conflict with HTML markup or decode named and numeric entities back to readable text.
Input: <b>Tom & Jerry</b>
Output: <b>Tom & Jerry</b>
Input: Fish & Chips & Tea
Output: Fish & Chips & Tea
Escape short HTML snippets before pasting them into documentation.
Encoding tools explain when to use Base64, URL encoding, and HTML entities.
Escaping text for display is not a full XSS sanitizer for arbitrary HTML rendering.
Ampersand, less-than, greater-than, double quote, and single quote are escaped.
No. Treat it as a text conversion helper, not a security sanitizer.