XSS Clean in CI4?

XSS_clean should be conspired deprecated. That's a not a recommended practice to rely on. You should filter your inputs AND escape your outputs.

Input:
https://codeigniter4.github.io/userguide...ation.html
https://codeigniter4.github.io/userguide...ving-input "Filtering Input Data"

Output:
https://codeigniter4.github.io/userguide...aping-data
https://codeigniter4.github.io/userguide...g-contexts

Then the function esc and setVar need be impressed on view template or where for example?