Tools menu
Free tool
HTML Entity Encoder
Convert reserved characters (<, >, &, ") to HTML entities to prevent XSS.
How to use this tool
Follow these steps to get the most out of the HTML Entity Encoder.
Enter any text containing HTML special characters.
The tool converts <, >, &, etc., into Safe Entities (<).
Use the encoded output to safely display code on web pages.
You can also decode entities back to raw characters.
The guide
URL Encoding (Percent-Encoding)
URL encoding converts characters into a format that can be transmitted over the Internet. Characters like spaces become %20 and slashes become %2F to ensure the URL is valid.
Why Escape HTML?
If you display user input directly on a webpage without encoding, you risk Cross-Site Scripting (XSS) attacks. Browsers might interpret <script> tags as actual code.
Encoding converts:
<to<>to>&to&"to"
This ensures the browser treats the data as text, not code.
More in Security & Crypto