Hacker News new | ask | show | jobs
by dreistdreist 3362 days ago
Automatic escaping would not work anyways, you need to escape for the appropriate context (HTML, JS, CSS, JSON, XML...).

You don't have to use a framework, just use one of the many composer packages available like Twig for example...