Convert special characters to HTML entities (named or numeric) or decode HTML entities back to text. Essential for XSS prevention.