zendframework/zf2 — pull request #1750 by padraic (2012-07-04 19:56:55+00:00)
Title: Zend\Escaper integration into Zend\View (BC break since Escape helper is now EscapeHtml)

Integrates Zend\Escaper across Zend\View helpers. Replaces Escape helper with EscapeHtml, EscapeHtmlAttr, EscapeJs, EscapeCSS and EscapeUrl helpers instead. Tests checked for Zend\View and Zend\Escaper.

Other background:

1. 2nd parameter to __invoke() on Escape* classes has been preserved.
2. Rationale for Escape helper deprecation is to enforce selection of correct Escape* helper per agreed RFC.
3. A Placeholder class had an inconsistent use of htmlspecialchars() directly (not via Escape helper). This was replaced with an instance of Zend\Escaper\Escaper.
4. Helpers can likely be refactored a bit further into the Helper\Escaper\AbstractHelper class.
5. Helpers likely still need a brief security review (there's a usage of Zend\Json instead of a true Javascript escaper but is likely safe - will review post-beta).