title: How does Codeigniter handle escaping output?
body: <p>I am using CodeIgniter. </p>
  
  <p>Recently, I read a PHP book and saw some functions to escape output to server to database using </p>
  
  <pre><code>*_escape_string()
  </code></pre>
  
  <p>and from server to browser using:</p>
  
  <pre><code>htmlentities()
  htmlspecialchars()
  </code></pre>
  
  <p>In my Codeigniter application, how are these functions handled?  Is it internally handled by the framework, or do I have to manually handle it?</p>
  
  <p>In Ccodeigniter form validation I have seen <code>xss_clean</code></p>
  
  <pre><code>$this-&gt;form_validation-&gt;set_rules('password', 'Password', 'required|xss_clean|min_length[6]|matches[confirmpassword]' );
  </code></pre>
  
  <p>Is <code>xss_clean</code> for preventing cross site scripting, or does it deal with the above I have mentioned?</p>