base64_encode escaping or not
<pre><code>$token = base64_encode( openssl_random_pseudo_bytes(32));

&lt;input type="hidden" name="csrf_token" value="&lt;?=$token?&gt;"&gt;
</code></pre>

<p>Do I need to escape the <code>$token</code> on output?</p>
