It returns both return htmlspecialchars( trim( $show ) ); and return $this->timeanddate( $time );. The former is escaped, the latter is tainted.