HTML Entity Converter

HTML entities are escape sequences that represent characters with special meaning in HTML markup. The less-than sign (<) must be written as < inside HTML to prevent the browser from interpreting it as the start of a tag. Similarly, ampersands (&) become & and double quotes (") become ". Failing to encode user-supplied content before inserting it into HTML is one of the root causes of Cross-Site Scripting (XSS) vulnerabilities — a class of attack where an attacker injects script tags or event handlers into a web page. This encoder also handles high-Unicode characters and the full named entity set from the HTML5 specification.