Escape special characters into HTML entities, or decode entities back into plain text.
Characters like <, >, and & have special meaning in HTML, so to show them as text you encode them as entities (<, >, &). Encode when you need to display code or user input; decode to read escaped markup. Everything stays in your browser.