What does the HTML Entity and Unicode Converter do?
Use this tool when you need a browser utility that escapes markup-significant characters and inspects Unicode code points. It accepts plain text, HTML entities, or JavaScript-style Unicode escapes and returns entities, decoded text, Unicode escapes, or a code-point list. Results are deterministic for the same input except where cryptographic randomness, current time, or a live provider response is part of the task.
Encoding is not sanitization
Use entities to display reserved characters as text in an HTML text or quoted-attribute context. Use a maintained HTML sanitizer when users are allowed to submit markup, because safe elements and attributes require policy decisions.
How do you use it?
- Choose entity encode/decode, Unicode escape encode/decode, or List code points.
- Enter text or encoded values; the result updates immediately.
- Verify the output context before copying it into HTML, JavaScript, CSS, or another language.
Worked example
Escape markup-significant characters
Input
<b title="A&B">Café</b>Output
<b title="A&B">Café</b>The encoder escapes ampersands, angle brackets, quotation marks, and apostrophes while leaving ordinary Unicode text intact.
Common errors and fixes
| Symptom | Likely cause | Fix |
|---|---|---|
| Encoded text is still unsafe in an event handler or script block. | HTML entity encoding alone does not cover JavaScript, CSS, URL, or attribute-policy risks. | Use context-aware escaping and a trusted sanitizer or templating system for untrusted HTML. |
| Unicode decode leaves an escape unchanged. | The input is not a four-digit \uXXXX escape or a \u{...} code-point escape. | Correct the escape syntax and ensure the value is a valid Unicode code point. |
Important behavior of HTML Entities
Entity encoding prevents characters from being interpreted as markup; it is not a complete HTML sanitizer.
Standards and implementation references
- WHATWG HTML — Named character references (opens in a new tab)Defines named HTML character references and parsing behavior.
- Unicode Standard (opens in a new tab)Defines Unicode scalar values and code points used by the inspection modes.
Frequently asked questions about HTML Entities
Does the HTML Entities upload my input?
No. Processing runs in the current browser tab, and the page does not send tool input to a KitLumi processing endpoint.
What input does the HTML Entities accept?
It accepts plain text, HTML entities, or JavaScript-style Unicode escapes. The workspace checks the input and reports malformed or unsupported values before it produces a result.
What does the HTML Entities produce?
It produces entities, decoded text, Unicode escapes, or a code-point list. Copy and download controls appear when the output format supports them.
What limitation should I know?
Entity encoding prevents characters from being interpreted as markup; it is not a complete HTML sanitizer.
What changed?
Added HTML entity encoding, Entity decoding, Unicode escapes, Code-point inspection, responsive controls, explicit runtime disclosure, and tested browser output.