String Escaper escapes and unescapes strings for eight contexts: JSON, SQL, HTML, regex, shell, URI, CSV, and XML. Chain mode applies multiple escape layers in sequence with step-by-step output, preventing the injection vulnerabilities that occur when developers apply escapes in the wrong order across nested serialization contexts.

How to use

1. Choose format and direction — Pick the target context (JSON, SQL, HTML, regex, shell, URI, CSV, XML) and direction (escape or unescape).
2. Enable chain mode (optional) — Provide an ordered array like [sql, json, uri] to apply multiple escapes in sequence.
3. Escape or unescape — Click Run or press Ctrl+Enter. Output shows the result plus per-step transformations for chain mode.

MCP / API

Call string_escaper directly from any MCP-compatible agent:

// MCP TypeScript SDK
const result = await client.callTool({
  name: "string_escaper",
  arguments: {
    "text": "...",
    "direction": "escape"
  }
});

// curl
curl -X POST https://obfus.link/mcp \
  -H "Authorization: Bearer <SPT>" \
  -H "Content-Type: application/json" \
  -d '{"method":"tools/call","params":{"name":"string_escaper","arguments":{"text":"...","direction":"escape"}}}'

Related tools

FAQ