CodeIgniter and XSS protection

[eluser]Padraic Brady[/eluser]
[quote author="Kenji @ CodeIgniter Users Group in Japan" date="1305298049"]Padraic, thank you for your comments, and your blog article.

The disclosure of the incident is not enough, I feel. Official Information about the security bug is too little.

And the CI documentaion about XSS protection is not good, at least the best security practice http://ellislab.com/codeigniter/user-gui...urity.html is not the best.

I think that improving CI documentaion benefits all CI users.[/quote]

I agree, and updating the documentation would take very little effort for potentially a lot of gain in educating users on how to write more secure apps with CI. That can only benefit CI's already positive reputation.