# @wordpress/escape-html > Escape HTML utils. Latest version **3.55.0** (published 2026-09-10) · GPL-2.0-or-later license · 0 weekly downloads ## Install ```sh npm install @wordpress/escape-html pnpm add @wordpress/escape-html yarn add @wordpress/escape-html bun add @wordpress/escape-html ``` ## Health **Score 70/100 (B)** — status: active. Positive: has types; esm support; no vulnerabilities; recently updated; high maintenance score; popular repo. Warnings: low downloads. ## Facts | | | |---|---| | Version | 3.55.0 | | Published | 2026-09-10 | | First published | 2018-10-10 | | Weekly downloads | 0 | | License | GPL-2.0-or-later | | TypeScript types | bundled | | Module format | ESM + CommonJS | | Node | >=18.12.0 | | Dependencies | 0 | | Unpacked size | 64.3 KB | | Known vulnerabilities | 0 | | Install scripts | no | | GitHub stars | 11754 | | Author | The WordPress Contributors | | Maintainers | garypendergast, adamsilverstein, gziolo, ntwb, riad, noisysocks, kadamwhite, gutenbergplugin, jorgefilipecosta, ellatrix, iandunn206, whyisjake, ockham, sirreal, nosolosw, wpisabel, ntsekouras, nerrad, desrosj, talldanwp, peterwilsoncc, ryanwelcher, mamaduka, aduth, johnbillion | | Keywords | wordpress, gutenberg, html | ## Links - npm: https://www.npmjs.com/package/@wordpress/escape-html - Repository: https://github.com/WordPress/gutenberg - Homepage: https://github.com/WordPress/gutenberg/tree/HEAD/packages/escape-html/README.md - Issues: https://github.com/WordPress/gutenberg/issues - npm.io page: https://npm.io/package/@wordpress/escape-html ## Alternatives - [@tsparticles/shape-image](https://npm.io/package/@tsparticles/shape-image.md) — 303.7K weekly downloads - [@tsparticles/shape-line](https://npm.io/package/@tsparticles/shape-line.md) — 233.7K weekly downloads - [stringify-attributes](https://npm.io/package/stringify-attributes.md) — 58.6K weekly downloads - [mobile-drag-drop](https://npm.io/package/mobile-drag-drop.md) — 46.3K weekly downloads - [@comunica/actor-rdf-parse-html](https://npm.io/package/@comunica/actor-rdf-parse-html.md) — 29.2K weekly downloads ## Recent versions - 3.55.0 (latest) — 2026-09-10 - 3.54.1-next.v.202609031004.0 (next) — 2026-09-03 - 3.40.1 (wp-7.0) — 2026-06-30 - 3.33.1 (wp-6.9) — 2025-10-28 - 3.19.1 (wp-6.8) — 2025-03-10 - 3.8.1 (wp-6.7) — 2024-09-19 - 3.0.1 (wp-6.6) — 2024-06-11 - 2.51.1 (wp-6.5) — 2024-02-20 - 2.42.13 (wp-6.4) — 2023-11-13 - 2.35.2 (wp-6.3) — 2023-10-12 - 2.26.2 (wp-6.2) — 2023-10-12 - 2.17.1 (wp-6.1) — 2022-09-20 - 2.6.1 (wp-6.0) — 2022-04-19 - 2.2.3 (wp-5.9) — 2021-11-15 - 2.1.2 (patch) — 2021-09-01 - … 223 more at https://npm.io/package/@wordpress/escape-html/versions ## README # Escape HTML Escape HTML utils. ## Installation Install the module ```bash npm install @wordpress/escape-html ``` _This package assumes that your code will run in an **ES2015+** environment. If you're using an environment that has limited or no support for such language features and APIs, you should include [the polyfill shipped in `@wordpress/babel-preset-default`](https://github.com/WordPress/gutenberg/tree/HEAD/packages/babel-preset-default#polyfill) in your code._ ## API ### escapeAmpersand Returns a string with ampersands escaped. Note that this is an imperfect implementation, where only ampersands which do not appear as a pattern of named, decimal, or hexadecimal character references are escaped. Invalid named references (i.e. ambiguous ampersand) are still permitted. _Related_ - - - _Parameters_ - _value_ `string`: Original string. _Returns_ - `string`: Escaped string. ### escapeAttribute Returns an escaped attribute value. _Related_ - "[...] the text cannot contain an ambiguous ampersand [...] must not contain any literal U+0022 QUOTATION MARK characters (")" Note we also escape the greater than symbol, as this is used by wptexturize to split HTML strings. This is a WordPress specific fix Note that if a resolution for Trac#45387 comes to fruition, it is no longer necessary for `__unstableEscapeGreaterThan` to be used. Note we also escape the less-than symbol to prevent HTML injection vulnerabilities and parsing issues, particularly for users without the unfiltered_html capability. See: _Parameters_ - _value_ `string`: Attribute value. _Returns_ - `string`: Escaped attribute value. ### escapeEditableHTML Returns an escaped Editable HTML element value. This is different from `escapeHTML`, because for editable HTML, ALL ampersands must be escaped in order to render the content correctly on the page. _Parameters_ - _value_ `string`: Element value. _Returns_ - `string`: Escaped HTML element value. ### escapeHTML Returns an escaped HTML element value. _Related_ - "the text must not contain the character U+003C LESS-THAN SIGN (\<) or an ambiguous ampersand." _Parameters_ - _value_ `string`: Element value. _Returns_ - `string`: Escaped HTML element value. ### escapeLessThan Returns a string with less-than sign replaced. _Parameters_ - _value_ `string`: Original string. _Returns_ - `string`: Escaped string. ### escapeQuotationMark Returns a string with quotation marks replaced. _Parameters_ - _value_ `string`: Original string. _Returns_ - `string`: Escaped string. ### isValidAttributeName Returns true if the given attribute name is valid, or false otherwise. _Parameters_ - _name_ `string`: Attribute name to test. _Returns_ - `boolean`: Whether attribute is valid. ## Contributing to this package This is an individual package that's part of the Gutenberg project. The project is organized as a monorepo. It's made up of multiple self-contained software packages, each with a specific purpose. The packages in this monorepo are published to [npm](https://www.npmjs.com/) and used by [WordPress](https://make.wordpress.org/core/) as well as other software projects. To find out more about contributing to this package or Gutenberg as a whole, please read the project's main [contributor guide](https://github.com/WordPress/gutenberg/tree/HEAD/CONTRIBUTING.md).

Code is Poetry.

--- _Source: https://npm.io/package/@wordpress/escape-html · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._