php - Disabling codeigniter xss filtering or running over it -
i have codeigniter website , i've turned on global xss filtering , i've developed website this. observed can't pass e-mails parameter no more . ex: www.foo.com/data?email=example@dot.com
i wonder how can pass email parameter keeping global xss filtering on, don't want add lot of xss_clean('data')
.
i thought splitting in pieces www.foo.com/data?id=example&domain=dot&ext=com
don't know if best idea. suggestions?
are url-encoding email?
name@domain.com should become name%40domain.com
Comments
Post a Comment