Format:
Quick Reference: Common HTML Entities
<Less Than
<>Greater Than
>&Ampersand
&"Double Quote
"'Single Quote
'©Copyright
©HTML 实体转义步骤
- 1选择“转义（Encode）”或“反转义（Decode）”。
- 2粘贴含有尖括号或特殊符号的源码。
- 3复制已转义的安全实体代码直接插入网页文档。
防范跨站脚本攻击 (XSS)
将用户输入的内容在输出前进行实体转义，能彻底阻止恶意 script 脚本被浏览器意外执行，保障站点安全。
Architecture & Privacy
- XSS Sanitization helper: Escapes reserved characters <, >, &, ", ' to neutralize injection payloads.
- Code point safe iteration: Iterates using Array.from(input) to avoid breaking surrogate pairs on multi-byte characters.
- Bidirectional decoding: Safely parses named, decimal, and hexadecimal entities simultaneously.