String Escaper / Unescaper

A string escaper converts raw text into a safely encoded form that can be embedded inside code, markup, or data formats without breaking the surrounding syntax. Every programming language and data format has its own set of reserved characters that must be escaped — for example, a double quote inside a JavaScript string literal must be written as a backslash followed by a double quote, and an ampersand inside HTML must be written as the entity reference.

This tool handles escaping and unescaping for seven common targets: JavaScript strings, HTML entities, JSON string values, SQL string literals, regular expressions, CSV fields, and XML. It works in both directions — you can escape raw text before embedding it in code, or unescape encoded strings back to their original human-readable form.

Common use cases include sanitising user input for safe SQL insertion (though parameterised queries are always preferred), preparing strings for inclusion in JSON configuration files, encoding HTML for display in a browser, escaping special characters in a regex pattern, and formatting CSV values that contain commas or quotes. Having all these converters in one place removes the need to hunt for format-specific tools and reduces the risk of manual encoding mistakes that can cause security vulnerabilities or parse errors.