HTML Entity Encoder
Escape (or unescape) & < > " ' for safe HTML.
使用方法
- 一切都在您的浏览器本地运行：不会上传任何数据，无需账户。
关于
Escape text so it displays literally inside HTML — converting & < > " and ' to their entity forms — or reverse the process to decode entities back to characters.
Escaping user-supplied text before inserting it into HTML output is the single most effective defense against reflected XSS.
一切都在您的浏览器本地运行：不会上传任何数据，无需账户。
Embed this tool
Customize and copy an iframe. Linking back helps both sites.