Filter

[g105b]

Even though XSS isn't really a threat when using the DOM, most user input probably wants to be put through something like strip_tags. Someone's username of <script>alert("pwned")</script> would be nice to clean up.

Register a callback function to filter all user input, or just particular keys.

Idea:

$this->input->filter([$myClass, $inputFilter->filter(...)]) to pass EVERY kvp through your callback.
$this->input->filter([$myClass, $inputFilter->filter(...)], "name", "postcode") to only pass name and postcode kvps through your callback.