HTML एंटिटी एनकोडर

HTML entities are codes that represent characters in HTML. They start with & and end with ;, such as &lt; for < or &copy; for ©. They let you show characters that would otherwise be read as HTML code, or that are hard to type.

In page text, always encode < and &. Inside attribute values, also encode the quote character used around the value (" or '). Encoding > is optional but common. Everything else, including emoji, can be written directly in a UTF-8 page.

Named entities such as &eacute; are easier to read, but only exist for some characters. Numeric entities such as &#233; (decimal) or &#xE9; (hex) work for every Unicode character.

Encoding < > & " and ' is the right defense when inserting untrusted text into HTML content or quoted attributes. It is not enough inside <script> blocks, URLs or CSS, which need their own escaping.