Unescape HTML entities in Javascript?

if the string you are trying to convert isn't trusted then you will end up with a Cross-Site Scripting (XSS) vulnerability. For the function in the accepted answer, consider the following: htmlDecode(""); The string here contains an unescaped HTML ta...