xss

here is what I'm doing: <input value="{{ value | strip_html | escape }}"> looking at examples it seems like escape might be enough https://github.com/Shopify/liquid/search?p=1&q=escape&unscoped_q=escape but it doesn't escape <, >, and " for instance. (obviously no escape leads to an…