Encoding

ELI5 — The Vibe Check

Encoding is converting data into a different format for safe transport or storage — not for security, but to prevent misinterpretation. URL encoding turns spaces into %20 so URLs stay valid. Base64 encoding turns binary data into text. It's not encryption — encoded data can be decoded by anyone.

Real Talk

Encoding transforms data into a different representation for compatibility or safe transmission. In security, output encoding is critical for injection prevention — encoding data for the specific context (HTML, URL, JSON) it will be inserted into. Different from encryption: encoding has no key and is reversible by anyone.

Show Me The Code

// URL encoding
const encoded = encodeURIComponent('hello world & more');
// 'hello%20world%20%26%20more'

// Base64 encoding (NOT encryption)
const b64 = Buffer.from('secret data').toString('base64');
// 'c2VjcmV0IGRhdGE='
const decoded = Buffer.from(b64, 'base64').toString();
// 'secret data'

When You'll Hear This

"URL-encode the query parameters before appending them." / "Base64 is encoding, not encryption — don't use it to hide data."