HTML Escape / Unescape

Escape or unescape HTML entities including named, decimal, and hex numeric entities.

HTML / Text Input

Escaped Output

HTML Entity Reference

Context	Required	Reason
User-generated content in HTML	Yes	Prevents XSS attacks
Code samples in <pre> blocks	Yes	Angle brackets would close tags
Attribute values	Yes	Quotes can break attributes
JSON in HTML <script>	Partial	Escape </script> closing tag
Template literals in JS	No	Use JS string escaping instead

HTML escaping converts special characters to HTML entities so browsers display them as text rather than interpreting them as markup.

Yes — escaping user input before inserting it into HTML prevents reflected and stored XSS. Always escape on output, not on input storage.

' is valid in XML but NOT in HTML4. Use ' for maximum compatibility across HTML4, HTML5, and XML.

Emoji and most Unicode characters do not need escaping in UTF-8 HTML5. Only the 5 special characters (&, <, >, ", ') must be escaped.

JSON Escape / Unescape

Escape JSON to a string literal or unescape it

URL Encoder / Decoder

Encode or decode URLs — query, path, form encoding

Base64 Encoder / Decoder

Encode or decode Base64 — Standard, URL-safe, Raw

JSON Formatter

Beautify and format JSON with indentation

JSON Validator

Find syntax errors with line and column numbers

Regex Tester

Test regex patterns with match highlighting and RE2 notes