Escape and unescape strings for JSON, HTML, XML, SQL, JavaScript, and more. Essential tool for developers working with different data formats.
Six formats: JSON, HTML, XML, SQL, JavaScript, and URL. Select a format button first, then use Escape or Unescape on your text; the chosen mode applies to both directions.
By doubling single quotes, the standard SQL convention, so a name like O'Neill becomes O''Neill. Unescaping reverses the doubling. Note that parameterized queries remain the safest defense against SQL injection.
JavaScript escaping also handles single quotes and vertical tabs, which JSON leaves alone. Use JSON mode when the output goes into JSON files or APIs, and JavaScript mode when the string is embedded directly in JS source.
The URL decoder is forgiving: an invalid percent sequence simply returns your text unchanged. Other modes reverse their escape rules directly, and if a conversion genuinely fails, the output box shows an error message rather than breaking the page.
No. Every escape and unescape operation is plain client-side JavaScript running in this page. Nothing is logged, stored, or sent to a server.