HTML Entity and Unicode Converter可以处理什么？
HTML Entity and Unicode Converter 用于在浏览器中编码或解码内容，并清楚显示处理结果和限制。 已核对的功能： HTML entity encoding, Entity decoding, Unicode escapes, Code-point inspection.
Encoding is not sanitization
Use entities to display reserved characters as text in an HTML text or quoted-attribute context. Use a maintained HTML sanitizer when users are allowed to submit markup, because safe elements and attributes require policy decisions.
如何使用？
- Choose entity encode/decode, Unicode escape encode/decode, or List code points.
- Enter text or encoded values; the result updates immediately.
- Verify the output context before copying it into HTML, JavaScript, CSS, or another language.
实际输入输出示例
Escape markup-significant characters
输入
<b title="A&B">Café</b>输出
<b title="A&B">Café</b>The encoder escapes ampersands, angle brackets, quotation marks, and apostrophes while leaving ordinary Unicode text intact.
常见错误与修复方法
| 现象 | 可能原因 | 修复方法 |
|---|---|---|
| Encoded text is still unsafe in an event handler or script block. | HTML entity encoding alone does not cover JavaScript, CSS, URL, or attribute-policy risks. | Use context-aware escaping and a trusted sanitizer or templating system for untrusted HTML. |
| Unicode decode leaves an escape unchanged. | The input is not a four-digit \uXXXX escape or a \u{...} code-point escape. | Correct the escape syntax and ensure the value is a valid Unicode code point. |
Important behavior of HTML Entities
该工具的实际边界： Entity encoding prevents characters from being interpreted as markup; it is not a complete HTML sanitizer.
标准与实现参考
- WHATWG HTML — Named character references (opens in a new tab)Defines named HTML character references and parsing behavior.
- Unicode Standard (opens in a new tab)Defines Unicode scalar values and code points used by the inspection modes.
关于HTML Entities的常见问题
Does the HTML Entities upload my input?
No. Processing runs in the current browser tab, and the page does not send tool input to a KitLumi processing endpoint.
What input does the HTML Entities accept?
It accepts plain text, HTML entities, or JavaScript-style Unicode escapes. The workspace checks the input and reports malformed or unsupported values before it produces a result.
What does the HTML Entities produce?
It produces entities, decoded text, Unicode escapes, or a code-point list. Copy and download controls appear when the output format supports them.
What limitation should I know?
Entity encoding prevents characters from being interpreted as markup; it is not a complete HTML sanitizer.
更新记录
本次实质更新： HTML Entities: Added HTML entity encoding, Entity decoding, Unicode escapes, Code-point inspection, responsive controls, explicit runtime disclosure, and task-specific examples and limitations.