#twig, #htmlspecialchars, #htmlspecialchars_decode

1.php

// Prevent html injection eg: <h1>hihi</h1>
$text = htmlspecialchars($text)

// twig default with prevent the html injection
{{ text }} -> &lt;h1&gt;hihi&lt;/h1&gt;

{{ text | raw }} -> <h1>hihi</h1>

// convert &gt; -> >, does not need unless you want to be hacked with html
htmlspecialchars_decode($text);