HTML escape
Replaces the five reserved HTML characters (<, >, &, ", ') with their entity equivalents so untrusted text can be safely embedded in HTML.
<script>alert(1)</script>
HTML escape
Escape <, >, &, ", and ' to HTML entities.