XSS attack from Exceptions Lib?

[eluser]Xeoncross[/eluser]
I modified the Exceptions Lib to protect the user from XSS. However, I am not sure if this is necessary. Is the var $page ever composed from URL chars that are not cleaned?

If the values that make $page are just pulled from the URL path - this means that someone could send someone to site.com/path/[removed]xssattack[removed] and use it for a CSFR/XSS.

Code:

<?php
class MY_Exceptions extends CI_Exceptions {
    
    /**
     * Constructor
     *
     */    
    function MY_Exceptions(){
        parent::CI_Exceptions();
    }

    /**
     * 404 Page Not Found Handler
     *
     * @access    private
     * @param    string
     * @return    string
     */
    function show_404($page = '') {    
        //Make the $page name XSS safe
        parent::show_404(htmlentities($page, ENT_QUOTES, 'UTF-8'));
    }

}
?>