HTML entities

Escape and unescape. Runs in your browser; pasted markup is treated as text and never executed.