XML Escape Unescape

XML escaping is the process of converting special characters in XML content to their predefined entity references. According to the XML specification (W3C), five characters must be escaped when used in XML text content or attribute values to maintain well-formed XML.

For example, the string Tom & Jerry said "Hello" becomes Tom & Jerry said "Hello" when properly escaped for XML.

XML Predefined Entities

Note: > escaping is not strictly required in XML text content but is recommended for readability. " is required only in attribute values delimited by double quotes, and ' only in attribute values delimited by single quotes.

1. Escape — Type or paste raw XML content into the left panel, then click Escape to convert special characters to XML entities.
2. Unescape — Type or paste escaped XML content into the right panel, then click Unescape to revert XML entities to their actual characters.
3. Options — Toggle escaping of " and ' entities, or enable non-ASCII character encoding via &#XXXX; numeric entities.
4. Swap & Clear — Click Swap to exchange escape/unescape values, Clear All to reset everything.

• XML/HTML document generation — Ensure text content is properly escaped before embedding in XML or HTML documents.
• RSS/Atom feed creation — Escape special characters in feed titles, descriptions, and content before publishing.
• SOAP API requests — Properly escape XML payloads when making SOAP web service calls.
• Configuration files — Escape values in XML-based config files (Maven POM, Ant build files, Spring config).
• XSS prevention — Escape user-generated content before inserting into XML/HTML to prevent injection attacks.