HTML Decoder

Restore HTML character references as text locally; decoded markup is not executed.

HTML entities

Decoded text

ReadyDecodes HTML character references locally. The result is shown as text and is not executed as markup.

Source & result review

Inspect what the browser parsed and what the tool produced

DOMParser ≠ sanitizer

Ready to inspect source and result.

Review is local and detached: this panel never inserts pasted markup into the live page. A browser parser can normalize malformed HTML, but successful parsing does not make markup safe to inject. Scripts, inline event attributes and embedded browsing/plugin elements are reported as active-content signals, not executed.

Browser-local does not mean standards-complete

HTML parsing is error tolerant. Source diagnostics, sandboxed previews, and transformations do not replace full conformance, security, or production-browser testing.

Decoded entities can become markup-looking text

Decoded output remains text in this interface. If it contains tags or event attributes, review it as code before placing it into any live HTML context.

Parser and sanitizer boundary

HTML DOMParser creates a detached document and may repair or normalize markup. That is useful for inspection, but parsing alone does not sanitize untrusted HTML. Review scripts, inline event attributes, embedded content and application-specific URL/context rules before any live-DOM insertion.