Cross-Site Scripting (XSS) Prevention
Escape dangerous user-submitted markup (<, >, &, ", ') into safe entity representations before rendering in web views.
Encode and decode HTML entities online for free. Convert special characters into safe named, decimal, or hexadecimal entities to prevent XSS vulnerabilities and render markup safely.
Convert special characters to HTML entities or decode entities back into plain text.
Choose your operation mode: "Encode HTML Entities" or "Decode HTML Entities".
Select your entity format preference: Named entities (<), Decimal (<), or Hexadecimal (<).
Type or paste your text or HTML snippet into the input box.
View the converted text in real time with conversion statistics and click "Copy Result" or "Swap Directions".
Escape dangerous user-submitted markup (<, >, &, ", ') into safe entity representations before rendering in web views.
Choose between human-readable named entities (&), universal numeric decimal entities (&), or compact hex entities (&).
Seamlessly encode raw HTML markup or decode encoded API responses with a single click.
Encode non-ASCII currency signs, copyright markers, trademarks, and accented Latin characters accurately.
The five critical characters that must always be escaped in HTML to prevent markup injection are: & (&), < (<), > (>), " ("), and ' (' or ').
Named entities use memorable text aliases (e.g., © for copyright or for non-breaking space). Numeric entities use Unicode codepoints in decimal (©) or hexadecimal (©), which are supported across older or non-standard HTML parsers.
Yes! If text has been double-encoded (e.g., &lt;), you can click decode once to resolve to <, and a second time to resolve to <.
Developer Tools
Format, beautify, and minify HTML, XML, and SVG markup with clean indentation, comment stripping, and real-time live preview.
Encode or decode URL components and query strings with percent encoding.
Encode and decode Base64 text and binary data online with UTF-8 character support, URL-safe Base64, and instant clipboard copying 100% in your browser.
Transform titles, headings, and product names into clean, SEO-friendly URL slugs with custom separators, stop word removal, and accent transliteration.
Format, beautify, validate, and minify JSON data online with instant syntax error highlighting and tree inspection.
Generate secure, cryptographically random Version 4 (v4) and time-ordered Version 7 (v7) UUIDs and GUIDs with custom formatting, bulk batch generation, and live inspection.