Encoding special characters
<script>alert("XSS")</script><script>alert("XSS")</script>
Encode special characters as HTML entities and decode them back.
The result will appear here.
Was this tool useful?
HTML uses angle brackets, ampersands and quotes as structural characters. When you need to display them as literal text inside an HTML document, they must be escaped to their entity equivalents: < becomes <, > becomes >, & becomes &.
Encoding is also important for security: storing user-supplied text without encoding it is how XSS (cross-site scripting) vulnerabilities are introduced.
<script>alert("XSS")</script><script>alert("XSS")</script>