Use of $modx->htmlspecialchars instead of htmlspecialchars
Avoid XSS
- $modx->htmlspecialchars or explicit integer casting on $_GET/$_POST values