Runs in your browser. Your data is not uploaded or stored.
How to use it
- Paste or type your text in the input box, or upload a file.
- The result appears as you type. Change the options above it if you need to.
- Copy the result or download it as a file.
Good to know
- The five characters that matter for HTML safety are always escaped: & < > " and '.
- Encoding non-ASCII is only needed for old systems that cannot handle UTF-8.
Questions
- Is my data uploaded anywhere?
- No. Everything runs in your browser with JavaScript. What you type or paste never leaves your device.
- Does this protect against XSS?
- Escaping these characters is the core step for showing untrusted text inside HTML. Your framework or template engine should still escape output automatically.