...ESCAPE UNTRUSTED DATA BEFORE PUTTING HERE...
*
* @param string $string
* @return string
*/
public static function html($string)
{
return (new Escaper('utf-8'))->escapeHtml($string);
}
/**
* Escape JavaScript data values
*
* This can be used to put dynamically generated JavaScript code
* into both script blocks and event-handler attributes.
*
*
*
*
*
* @param string $string
* @return string
*/
public static function js($string)
{
return (new Escaper('utf-8'))->escapeJs($string);
}
/**
* Escape URL parameter values
*
* This can be used to put untrusted data into HTTP GET parameter values.
* This should not be used to escape an entire URI.
*
*
link
*
* @param string $string
* @return string
*/
public static function url($string)
{
return rawurlencode($string);
}
/**
* Escape XML element content
*
* Removes offending characters that could be wrongfully interpreted as XML markup.
*
* The following characters are reserved in XML and will be replaced with their
* corresponding XML entities:
*
* ' is replaced with '
* " is replaced with "
* & is replaced with &
* < is replaced with <
* > is replaced with >
*
* @param string $string
* @return string
*/
public static function xml($string)
{
return htmlspecialchars($string, ENT_QUOTES | ENT_XML1, 'UTF-8');
}
}