XSS Helper

Encode a string for URL, HTML, JavaScript and CSS contexts

URL
URL encode

                
Every character

                
Double URL encode

                
HTML
Escape (& < > " ')

                
Decimal entities

                
Hex entities

                
JavaScript
String.fromCharCode

                
Hex escapes

                
Unicode escapes

                
Other
CSS escapes

                
Base64