Chris@0: # zend-escaper Chris@0: Chris@0: [![Build Status](https://secure.travis-ci.org/zendframework/zend-escaper.svg?branch=master)](https://secure.travis-ci.org/zendframework/zend-escaper) Chris@15: [![Coverage Status](https://coveralls.io/repos/github/zendframework/zend-escaper/badge.svg?branch=master)](https://coveralls.io/github/zendframework/zend-escaper?branch=master) Chris@0: Chris@0: The OWASP Top 10 web security risks study lists Cross-Site Scripting (XSS) in Chris@0: second place. PHP’s sole functionality against XSS is limited to two functions Chris@0: of which one is commonly misapplied. Thus, the zend-escaper component was written. Chris@0: It offers developers a way to escape output and defend from XSS and related Chris@0: vulnerabilities by introducing contextual escaping based on peer-reviewed rules. Chris@0: Chris@0: - File issues at https://github.com/zendframework/zend-escaper/issues Chris@15: - Documentation is at https://docs.zendframework.com/zend-escaper/