Add escaping in Renderer

Author: devanych

src/Renderer.php

@@ -14,7 +14,6 @@
 use function func_get_arg;
 use function get_class;
 use function htmlspecialchars;
-use function htmlspecialchars_decode;
 use function is_dir;
 use function ltrim;
 use function ob_end_clean;
@@ -245,27 +244,16 @@ public function render(string $view, array $params = []): string
     }
 
     /**
-     * Encodes special characters into HTML entities.
+     * Escapes special characters, converts them to corresponding HTML entities.
      *
-     * @param string $content content to be encoded.
-     * @return string encoded content.
+     * @param string $content content to be escaped.
+     * @return string escaped content.
      */
-    public function encode(string $content): string
+    public function esc(string $content): string
     {
         return htmlspecialchars($content, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8', true);
     }
 
-    /**
-     * Decodes special HTML entities back to the corresponding characters.
-     *
-     * @param string $content content to be decoded.
-     * @return string decoded content.
-     */
-    public function decode(string $content): string
-    {
-        return htmlspecialchars_decode($content, ENT_QUOTES);
-    }
-
     /**
      * Magic method used to call extension functions.
      *

tests/RendererTest.php

@@ -148,11 +148,10 @@ public function testAddGlobalOverwriteFromParams(): void
 
     public function testEncodeAndDecode(): void
     {
-        $decoded = '<script>alert(123);</script>';
-        $encoded = '&lt;script&gt;alert(123);&lt;/script&gt;';
-        $this->assertSame($encoded, $this->renderer->encode($decoded));
-        $this->assertSame($decoded, $this->renderer->decode($encoded));
-        $this->assertSame($decoded, $this->renderer->decode($decoded));
+        $this->assertSame(
+            '&lt;script&gt;alert(123);&lt;/script&gt;',
+            $this->renderer->esc('<script>alert(123);</script>')
+        );
     }
 
     public function testAddExtensionAndCallMagic(): void