title: Codeigniter output and input security
body: <p>In case of user submitted text, when outputting to the page, what text filter do you use both in input and output?</p>
  
  <p>As I understand it, using <code>$this-&gt;input-&gt;post('something',true)</code> will clean XSS content from the input data, so there is no other thing to do to be secure? Something like <code>htmlspecialchars()</code>, <code>strip_tags()</code>, etc.?</p>
  
  <p>Also i would like to know if for example htmlspecialchars() is good to use, why CI security library doesn't applyes htmlspecialchars() by default to the passed string?</p>