What do you do with html injections?

[eluser]Mr.Data[/eluser]
The prepping functions of the form validation class only can be used to filter form content in order to save it later and not to display it. Moreover I can't see an option there to do it globally.