Do I need escaping url on each method?

What kind of data are you passing thru the url and how do you use $data['filter_name'] afterwards?

Codeigniter will only accept characters inside $config['permitted_uri_chars'] in the url, but as you convert everything in the url. It won't look for any illegal characters as there aren't any.