HTML ایسکیپ
HTML خاص حروف کو ایسکیپ یا ان-ایسکیپ کریں۔
HTML ایسکیپ کو کیسے استعمال کریں
- 1اپنا متن یا HTML پیسٹ کریں
- 2HTML اینٹٹیز انکوڈ کرنے کے لیے ایسکیپ پر کلک کریں، یا ڈی کوڈ کرنے کے لیے آن ایسکیپ
- 3نتیجہ کاپی یا ڈاؤن لوڈ کریں
HTML ایسکیپ کے بارے میں
HTML ایسکیپ/آن ایسکیپ HTML میں خاص معنی رکھنے والے حروف کو HTML اینٹٹی کے مساوی میں تبدیل کرتا ہے۔
HTML ایسکیپ کی اہم خصوصیات
- Escape the five core HTML special characters: &, <, >, ", '
- Unescape HTML entities back to their original characters
- Prevents XSS vulnerabilities when inserting text into HTML
- Handles named entities (&, <, >, ", ')
- One-click copy for escaped and unescaped output
- Works entirely in-browser — no data is sent to any server
- Instant conversion with real-time output
- Useful for rendering code examples and user-generated content safely
معاون فارمیٹس
ان پٹ فارمیٹس
آؤٹ پٹ فارمیٹس
HTML5 وضاحت کے مطابق پانچ بنیادی HTML خاص حروف کو ایسکیپ کرتا ہے۔
مثالیں
Escape a code snippet for display in HTML
Make source code render as text rather than being parsed as HTML tags.
ان پٹ
<div class="box">Hello & World</div>
آؤٹ پٹ
<div class="box">Hello & World</div>
Unescape HTML entities from a database record
Convert stored HTML entities back to readable characters for editing.
ان پٹ
It's a "great" day & we're happy
آؤٹ پٹ
It's a "great" day & we're happy
عام استعمال کے معاملات
- Safely inserting user-generated content into HTML templates to prevent XSS
- Displaying code examples in blog posts without them being parsed as HTML
- Preparing text for insertion into HTML email templates
- Decoding HTML entities stored in databases for editing
- Converting API response text containing entities to readable strings
- Escaping strings before inserting them into innerHTML calls
مسئلہ حل کرنا
Entities appear double-encoded like &amp;
حل
The text was already escaped before you escaped it again. Unescape first to get the original characters.
Not all special characters are being escaped
حل
This tool escapes the five core HTML characters. Extended entities like © or are not in scope.
Unescaping does not convert all entities
حل
This tool handles the five core entities. Rare named entities like → may not be decoded — use a full HTML parser for comprehensive decoding.
اکثر پوچھے جانے والے سوالات
Why escape HTML?
Unescaped characters like < and > are interpreted as HTML tags. Without escaping, user-submitted text containing <script> tags can execute arbitrary JavaScript — a cross-site scripting (XSS) attack.
Which characters are escaped?
The five core HTML special characters: & → &, < → <, > → >, " → ", ' → '.
What is the difference between HTML escaping and URL encoding?
HTML escaping converts characters to HTML entities for safe rendering inside HTML. URL encoding converts characters to %XX hex format for safe use in URLs.
Should I escape or sanitize user content?
For displaying user content as plain text in HTML, escaping is sufficient. If you need to allow some HTML tags, use a trusted HTML sanitizer library.
Is HTML escaping enough to prevent XSS?
Escaping is the primary defense when inserting text into HTML content. However, the correct escaping strategy depends on context — JS strings, HTML attributes, and URLs each require different rules.
What does &amp; mean?
&amp; is a double-encoded ampersand — it renders as & in the browser. This usually occurs when content is escaped twice.
Is my data sent to a server?
No. All escaping and unescaping is performed in your browser using JavaScript string replacement.
Can I use this to prepare content for JSON inside HTML?
For JSON in HTML (e.g., inside a <script> tag), use JSON.stringify and ensure the string is placed correctly. HTML entity escaping alone is not sufficient.