Percent-encoding, query strings, HTML and XML entities, and Punycode for internationalized domains — the encodings that keep URLs valid and markup safe. Everything runs locally in your browser.
- URL Encoder
Percent-encode a URL or a single value.
- URL Decoder
Decode percent-encoded URLs back to readable text, with an optional plus-as-space rule and a repeat mode that unwraps double-encoded values such as %253A.
- URI Component Encoder
Escape a single URI component – a query value, path segment or fragment – so reserved characters like ampersand, equals, question mark, slash and hash cannot break the surrounding URL.
- URI Component Decoder
Decode a single percent-encoded URI component back to its original value, treating the plus sign as a space by default as HTML form submissions do.
- Query String Parser
Split a URL query string into readable key and value pairs or JSON, decoding percent-escapes and plus signs, and flagging repeated parameters whose handling differs between servers.
- Query String Builder
Turn key and value lines or a JSON object into a correctly escaped query string, with repeated keys for array values and optional RFC 3986 strict escaping.
- HTML Entity Encoder
Convert characters into HTML entities so markup displays as text instead of being parsed.
- HTML Entity Decoder
Turn HTML entities back into characters – named, decimal and hexadecimal – with a repeat mode for text that was escaped twice.
- XML Entity Encoder
Escape text for XML, which predefines only amp, lt, gt, quot and apos – everything else must be a numeric reference.
- XML Entity Decoder
Decode XML entities back to text.
- Punycode Encoder
Convert an internationalized domain name to its ASCII xn-- form using RFC 3492 Punycode, so non-Latin domains work in DNS.
- Punycode Decoder
Turn xn-- domain labels back into readable Unicode, and flag mixed-script labels that may be homograph lookalike domains used in phishing.
