title: Is $this->escape() in the Zend view enough for xss
body: <p>I do a lot of <code>$this-&gt;escape()</code> in the zend view. Is this enough to prevent XSS? </p>
  
  <p>There's HTMLPurifier outside the Zend Framework. I wonder how zend's <code>$this-&gt;escape()</code> compares to HTMLPurifier. </p>