# PHP has a new Template Engine. Pesto is a traditional Italian sauce that originated in Genoa (Liguria region), It is also the place where a new template engine for PHP is being developed, seeking simplicity, minimal code, and full compatibility with HTML. Pesto is a project with zero dependencies and in constant evolution, yuo can check it directly on [Github](https://github.com/millancore/pesto). ```bash composer require millancore/pesto ``` The first time you see the syntax, you know what's going to happen. It's expressive. ![](https://cdn.hashnode.com/res/hashnode/image/upload/v1756210257292/dfe6c11c-f39f-4f0e-9393-5e38c84732aa.png align="center") ## XSS Security **Pesto** only uses one type to print PHP expressions `{{ $variable }}`, And all of them are escaped according to the context in which they are found, whether they are in a **js** block, **css**, html **attribute** or comment, it is able to determine what their context is and how it should escape the values to make them secure. It is also possible to specify that we do not want to escape, thanks to filters. `{{ $trust | raw }}` ## php-\* Attributes Very few attributes are actually used, but they are more than enough to build interfaces. * `php-partial` To incluide other views, this is use with `php-with` to pass data to partial view. * `php-slot` It is used to define the content of a slot (only named slots) defined in a partial view. * `php-if` `php-elseif` `php-else` simple condition * ```xml

Admin

Moderator

Guest

``` `php-foreach` Iterate elements * ```xml
  • {{ $item }}
    • ``` ## The <template> Tag We do not always want to include the HTML tag where we have defined the attribute. We can use the `