Filtering field values for XSS vulnerability

In includes/http/Request.php, Double quotation(") and Single quotation(') are not escaped when getting GET parameter with $request->get() XSS (cross site scripting) vulnerability exists.