Startseite
Tom Utilities

HTML-Escape / Unescape

HTML, CSS & JavaScript

Wandelt Text für sichere HTML-Ausgabe um oder dekodiert HTML-Entities zu lesbaren Zeichen.

Eingabe

Ergebnis

Verwendung

Escaping HTML entities

Press Encode to escape angle brackets and ampersands, or Decode to turn entities back into characters.

  1. Paste text or markup.
  2. Press Encode or Decode.
  3. Copy the converted result.

Häufige Fragen

Can escaping protect against XSS?

Escaping is one layer of defence. Always escape output on the server as well.

Are numeric entities supported?

Yes, decode understands named, decimal and hexadecimal entities.