// encode · decode · html

HTML Escape

Escape special characters before showing untrusted text in HTML, or decode entities for reading.

✓ runs entirely in your browser

Escaping text is one XSS defense. It does not make arbitrary HTML safe to render.