Question 1

What is HTML escaping?

Accepted Answer

HTML escaping converts special markup characters (like <, >, &) that represent tags or directives in HTML syntax into their respective safe character entity representations (like <, >, &). This prevents the browser from rendering the string as actual HTML layout code or executing cross-site scripts (XSS).

Question 2

What is the difference between standard and strict escaping?

Accepted Answer

Standard escaping converts only the 5 essential HTML markup characters: &, <, >, ", and '. Strict escaping converts all non-alphanumeric characters (including punctuation, symbols, and letters with accents) to their corresponding decimal unicode entity entities (e.g. &#123;), which is safer when nesting string variables inside script attributes.

Question 3

How does the decoder handle entity variations?

Accepted Answer

Our decoder uses the browser's native HTML parser engine (`DOMParser`), meaning it resolves named characters (like &eacute; or &mdash;) as well as hexadecimal (&#x...) and decimal (&#...) entity codes perfectly.

HTML Entities Encoder

About HTML Entities Encoder & Decoder

How to use HTML Entities Encoder & Decoder

Frequently Asked Questions