Output Encoding Security Check

Analyze PHP code for XSS and output encoding vulnerabilities.

Detection Patterns

1. Missing HTML Encoding

// CRITICAL: Direct echo of user input
echo $_GET['name'];
echo $user->getBio();

// CRITICAL: In HTML attribute
<input value="<?= $value ?>">
<a href="<?= $url ?>">