title: When i need to escape Html string?
body: <p>In my legacy project i can see the usage of escapeHtml before string is sent to browser.</p>
  
  <pre><code>StringEscapeUtils.escapeHtml(stringBody);
  </code></pre>
  
  <p>I know from api doc what escapeHtml does.here is the example given:-</p>
  
  <pre><code>For example: 
  "bread" &amp; "butter"
  becomes: 
  &amp;quot;bread&amp;quot; &amp;amp; &amp;quot;butter&amp;quot;.
  </code></pre>
  
  <p>My understanding is  when we send the string after escaping html its the browser responsibility that converts 
  back to original characters. Is that right?</p>
  
  <p><strong>But i am not getting why and when it is required and what happens if we send the string body without escaping html? what is the cost if we dont do escapeHtml before sending it to browser</strong></p>