Comment by dreistdreist

Automatic escaping would not work anyways, you need to escape for the appropriate context (HTML, JS, CSS, JSON, XML...).

You don't have to use a framework, just use one of the many composer packages available like Twig for example...