HTML Escape/Unescape

---

What is HTML Escape/Unescape tool?

HTML Escaping is the process of converting special characters into their corresponding HTML entities so that they are displayed as text in a browser instead of being interpreted as HTML code.

HTML Unescaping reverses this process — it converts HTML entities back into their original characters.

---

Why Should You Use HTML Escape/Unescape?

1. Security (Prevent XSS Attacks)
   Escaping helps protect against Cross-Site Scripting (XSS) by ensuring that user input is treated as text, not executable HTML or JavaScript.
2. Display Special Characters Safely
   Characters like <, >, &, and " have special meanings in HTML. Escaping ensures they display correctly.
   • Example: Displaying <div> as text on a page, not as an actual HTML element.
3. Data Integrity in Forms or Code Snippets
   When rendering code samples or form inputs, escaping ensures the content is not broken by embedded tags or symbols.

---

How Does It Work?

HTML Escaping replaces special characters with HTML entities:

Character	Escaped Entity
<	&lt;
>	&gt;
&	&amp;
"	&quot;
'	&#39;

Code Example:

original: 
<script>alert("Hi")</script>

escaped:
&lt;script&gt;alert(&quot;Hi&quot;)&lt;/script&gt;

Unescaping reverses said process.