html_escape on set_value

[eluser]royduin[/eluser]
If I look at set_value it runs through form_prep. When I take a look at form_prep it runs through html_escape! And html_escape is the same as htmlspecialchars with ENT_QUOTES and the charset.

So.. set_value takes values through htmlspecialchars!
But.. the default value just returns! So that is what I have to escape manuel like:

Code:

<input type="text" name="name" value="<? echo set_value('name',html_escape($name)); ?>" />

Thanks for the explanation!