Corrected previous comment!
Note that $content is automatically sanitized/escaped:
> into >
< into <
& into &
" into "
However, single quotes stay unescaped! This is major drawback, if you're creating sitemaps. To fix that and to prevent double escaping, you will need to use XMLWriter::writeRaw or extend the XMLWriter class and escape the content yourself with i.e.
<?php
$content = htmlspecialchars($content, ENT_QUOTES | ENT_XML1, 'UTF-8');
?>
XMLWriter::text or XMLWriter::writeElement would double escape ' and result in &apos;
XMLWriter::text
xmlwriter_text
(PHP 5 >= 5.1.2, PHP 7, PECL xmlwriter >= 0.1.0)
XMLWriter::text -- xmlwriter_text — Écrit du texte
Description
Style orienté objet
XMLWriter::text
( string
$content
) : boolStyle procédural
xmlwriter_text
( resource
$xmlwriter
, string $content
) : boolÉcrit du texte.
Liste de paramètres
-
xmlwriter -
Uniquement pour les appels procéduraux. La ressource XMLWriter qui a été modifiée. Cette ressource provient d'un appel à xmlwriter_open_uri() ou xmlwriter_open_memory().
-
content -
Le contenu du texte.
Valeurs de retour
Cette fonction retourne TRUE en cas de succès ou FALSE si une erreur survient.
add a note
User Contributed Notes 2 notes
luku at example dot com ¶
6 years ago
luku at example dot com ¶
6 years ago
Note that $content is automatically sanitized/escaped:
> into >
< into <
& into &
" into "
However, single quotes stay unescaped! This is major drawback, if you're creating sitemaps. You need to escape ' into ' before passing it to XMLWriter::text or XMLWriter::writeElement or extend the XMLWriter class.
