Início
Tom Utilities

Escape / unescape HTML

HTML, CSS e JavaScript

Escapa texto para saída HTML segura ou decodifica entidades HTML de volta para caracteres legíveis.

Entrada

Resultado

Como usar

Escaping HTML entities

Press Encode to escape angle brackets and ampersands, or Decode to turn entities back into characters.

  1. Paste text or markup.
  2. Press Encode or Decode.
  3. Copy the converted result.

Perguntas frequentes

Can escaping protect against XSS?

Escaping is one layer of defence. Always escape output on the server as well.

Are numeric entities supported?

Yes, decode understands named, decimal and hexadecimal entities.