HTML Entity Encoder / Decoder
Escape or unescape HTML special characters
About HTML Entities
HTML entities let you display characters that would otherwise be interpreted as markup. Encoding user-supplied content before rendering it is the single most effective defence against cross-site scripting (XSS).
Core entities
&→&<→<>→>"→"'→'
Example
Original: <script>alert(1)</script>
Encoded: <script>alert(1)</script>
Encoded: <script>alert(1)</script>