Type on either side — plain text on the left, HTML-safe on the right — and the other side updates live. Decodes numeric references (A, A) and the standard named entities (&, ©, , …). Runs entirely in your browser.
curl -sS -X POST https://devops.majbase.com/html-escape/api -H "Content-Type: application/json" -d '{"action":"escape","text":"<b>Tom & Jerry</b>"}'
curl -sS -X POST https://devops.majbase.com/html-escape/api -H "Content-Type: application/json" -d '{"action":"unescape","text":"<b>Tom &amp; Jerry</b>"}'
Returns {"result": "..."}, or {"error": "..."}.