CakePHP: h () vs Sanitize :: html ()

Question

CakePHP has a global function called h . This is a convenient method for htmlspecialchars . CakePHP also has a Sanitize utility that has an html method. Here is part of his description:

This method prepares user data for display inside HTML. This is especially useful if you do not want users to be able to layout or paste images or scripts inside your HTML pages.

When should everyone be used? Better than the other?

Answer 1

Sanitize::html() more universal: it allows you to completely remove HTML (using the remove option) and allows you to specify how it handles the citation.

See source code:
h() : http://api.cakephp.org/2.3/source-function-h.html#160-199
Sanitize::html() : http://api.cakephp.org/2.3/source-class-Sanitize.html#83-122

EDIT:
h() : calls htmlspecialchars()
Sanitize::html() : calls htmlentities()

For a discussion of the differences, see: htmlentities () vs. htmlspecialchars ()