Whatever, call it a transformer if that makes you hard. Point doesn't change: what escaping is needed is a function of the "transformer" and applied to the inp

Whatever, call it a transformer if that makes you hard. Point doesn't change: what escaping is needed is a function of the "transformer" and applied to the input (= consumption) side of it. You don't apply an escaping because data comes from a database, you apply it because it goes into one. Same with template processors, regex engines, etc...