Five: & becomes &, < becomes <, > becomes >, " becomes ", and ' becomes '. Escaping the ampersand first is what stops already-encoded text from being mangled.
Does decode restore every entity?
Decode handles named entities and numeric character references, including less common ones. Incomplete or invalid sequences are left as-is rather than guessed at.
HTML encode vs URL encode?
HTML encoding protects characters that would otherwise be read as markup inside a page. URL encoding uses percent-escapes so characters survive inside a web address. They are not interchangeable — use URL Encode / Decode for query strings.
Why escape user text before displaying it?
Unescaped input can close a tag and inject markup or script into your page — the classic cross-site scripting mistake. Escaping turns it into text that displays exactly as typed.
Can I paste a whole HTML document?
Yes, but be clear about which direction you want. Encoding a document turns all of its markup into visible text; decoding is for content that arrived double-escaped.
Is my input uploaded?
No. Conversion runs in your browser. Nothing is sent to a NeedAnyTool server for these tools.
