Skip to content

Glossary: Web App Security and Authentication

Entity

Also written: HTML entity, escaping, escapeHtml

An HTML code such as &lt; that the browser shows as a character instead of running it. Escaping replaces & < > " ' with entities when output is written.

Where the book teaches it

Related terms

XSSOutput encoding