protected function parse() { parent::parse(); // prevent XSS $filter = \SpoonFilter::arrayMapRecursive('htmlspecialchars', $this->filter); $this->tpl->assign($filter); }