Back
Syntax
Study
Editor
Mode:
HTML
CSS
JavaScript
PHP
Reset
Run »
HTML / CSS / JS
// Vulnerable echo "Hello, " . $_GET["name"]; // Safe: escape at output echo "Hello, " . htmlspecialchars($_GET["name"], ENT_QUOTES | ENT_HTML5, "UTF-8"); // In Blade (Laravel) — escaped by default {{ $name }} // safe — auto-escaped {!! $html !!} // raw — only for trusted HTML
Result
Open