HTML escaping replaces the special characters (<, >, &, quotes) of a piece of data with entities, so that it is displayed as text and not interpreted as HTML. It is done at output, depending on context (HTML, attribute, JavaScript, URL).
Example
<script>alert(1)</script>