Inicio
Tom Utilities

Escapar y desescapar HTML

HTML, CSS y JavaScript

Escapa texto para una salida HTML segura o decodifica entidades HTML a caracteres legibles.

Entrada

Resultado

Cómo usar

Escaping HTML entities

Press Encode to escape angle brackets and ampersands, or Decode to turn entities back into characters.

  1. Paste text or markup.
  2. Press Encode or Decode.
  3. Copy the converted result.

Preguntas frecuentes

Can escaping protect against XSS?

Escaping is one layer of defence. Always escape output on the server as well.

Are numeric entities supported?

Yes, decode understands named, decimal and hexadecimal entities.