PHPTAL.
XML . , XSS, .
Smarty raw PHP , , echo $foo ${foo} ( |escape} htmlspecialchars()) HTML- , , .
PHPTAL , HTML/XML, . , - :
<strong tal:omit-tag="condition">
xxx
</strong>
:
{if condition}<strong>{/if}
xxx
{if condition-again!}</strong>{/if}
XML ( ). HTML - .