how to protect your input hidden html

[eluser]Krzemo[/eluser]
Basically all you can do is to validate on server side and have global XSS filtering on. In CI 2.0 there is CSRF config option too.

[eluser]tusukgigi[/eluser]
how about this one

http://ellislab.com/forums/viewthread/71312/

but too hard to be understood

[eluser]Corbee[/eluser]
You got the jackpot.

Come to think of it, does anyone knows when CI 2.0 is going rc?