Sorted

[eluser]Karlos23[/eluser]
Sorted

[eluser]Pascal Kriete[/eluser]
Creating a link is not cross-site scripting. It is there to prevent javascript from being posted on your site. Take a look at this page for an introduction.

In the case of links and images, their href/src parameters will execute javascript under certain conditions so they are passed through a more stringent filter (which validates matching quotes).

Hope that helps. Welcome to CodeIgniter.