About

Web security relies heavily on the correct handling of user input and data display. When raw text containing reserved characters is rendered by a browser, it can break the layout or, more critically, execute malicious scripts-a vulnerability known as Cross-Site Scripting (XSS). This tool converts reserved characters into their corresponding HTML entities, rendering them safe for display. Conversely, it decodes entities back to their original state for editing or readability. This utility handles standard reserved characters alongside extended ASCII and Unicode symbols, supporting both decimal and hexadecimal formats used in modern web development standards.

Formulas

The encoding process maps a specific character to a predefined sequence. For example, the less-than symbol is crucial for defining HTML tags. To display it literally, it must be escaped.

char → {

< if char = << if Hex Mode

Reference Data

Character	Entity Name	Decimal	Hexadecimal	Description
"	"	"	"	Quotation Mark
&	&	&	&	Ampersand
<	<	<	<	Less Than
>	>	>	>	Greater Than
'	'	'	'	Apostrophe
©	©	©	©	Copyright Sign
®	®	®	®	Registered Sign
€	€	€	€	Euro Sign
				Non-breaking Space
™	™	™	™	Trademark
←	←	←	←	Left Arrow
∞	∞	∞	∞	Infinity

Frequently Asked Questions

It prevents Cross-Site Scripting (XSS). If a user inputs a script tag into a comment field and the server displays it raw, that script will execute in every visitor's browser. Encoding converts the brackets into safe entities, causing the browser to display the code text instead of running it.

Named entities (like ©) are human-readable but not every character has a name. Decimal (©) and Hexadecimal (©) references map directly to the Unicode code point of the character, providing coverage for the entire character set regardless of whether a semantic name exists.

Yes. Emojis are part of the Unicode standard. In comprehensive mode, this tool converts emojis into their respective decimal or hexadecimal HTML entity codes (e.g., 😀 for a grinning face), ensuring they render correctly across different file encodings.

" is the standard entity for double quotes. ' was introduced in XML and XHTML. While modern HTML5 browsers support both, " is historically more compatible with older HTML parsers.