Escape string to output HTML (and JS).
composer require rancoud/security
Security::escAttr('string');
Security::escHTML('string');
Security::escJS('string');
Security::escURL('string');
Security::escCSS('string');
Security::isSupportedCharset('string');
Charsets supported are only charsets shortlisted (see list below) which are also supported by mbstring extension.
More info at PHP documentation
And at the PHP libmbfl README
Charsets shortlisted:
- ISO-8859-1
- ISO-8859-5
- ISO-8859-15
- UTF-8
- cp866
- cp1251
- cp1252
- KOI8-R
- BIG5
- GB2312
- BIG5-HKSCS
- Shift_JIS
- EUC-JP
- MacRoman
- isSupportedCharset(charset: string): bool
- areCharsetAliases(charsetToCheck: string, charsetReference: string): bool
- escHTML(text: mixed, [charset: string = 'UTF-8']): string
- escAttr(text: mixed, [charset: string = 'UTF-8']): string
- escJS(text: mixed, [charset: string = 'UTF-8']): string
- escURL(text: mixed, [charset: string = 'UTF-8']): string
- escCSS(text: mixed, [charset: string = 'UTF-8']): string
composer ci
for php-cs-fixer and phpunit and coverage
composer lint
for php-cs-fixer
composer test
for phpunit and coverage