form_prep appears to be broken in 1.7.2 html entities are no longer protected. Or was it broken before?

[eluser]EvilivE[/eluser]
What worked for me was to "extended" form_helper with MY_form_helper and rewrote set_value. I don't like to messing around with system files when I can alter in application files.

Code:

/**
* Form Value
*
* Grabs a value from the POST array for the specified field so you can
* re-populate an input field or textarea.  If Form Validation
* is active it retrieves the info from the validation class
*
* @access    public
* @param    string
* @return    mixed
*/
if ( ! function_exists('set_value'))
{
    function set_value($field = '', $default = '')
    {
        if (FALSE === ($OBJ =& _get_validation_object()))
        {
            if ( ! isset($_POST[$field]))
            {
                return $default;
            }

            return $_POST[$field];
        }

        return $OBJ->set_value($field, $default);
    }
}