I suggest update the PHP example to apply escaping (yeah, Twig is way nicer for this thanks to the auto-escaping)