Encode special characters to HTML entities or decode entities back to text.
Use entity encoding when inserting user text into HTML to prevent XSS and broken markup. Common replacements: &, <, >, ".
Decode uses a temporary DOM element’s textContent via DOMParser so entities become plain text without executing scripts.