Why encode HTML?
Characters like <, >, & and quotes have special meaning in HTML. Encoding them prevents broken markup and cross-site scripting when showing user text.
FAQ
Which characters are escaped? The five core ones: &, <, >, " and apostrophe. Decoding handles all named and numeric entities.
Is it private? Yes — everything runs in your browser.