HTML Entity Encoder / Decoder

Escape <&>"' so text is safe to paste into HTML, or decode entities back to readable text.