Encode special characters to HTML entities and back. Optionally all non-ASCII characters too.
Data is processed only in your browser — nothing is sent anywhere.