application/helpers/security.php

   1 <?php
   2 defined('SYSPATH') or die('No direct access allowed.');
   3
   4 /**
   5  * Add functionality to kohanas built-in security helper
   6  */
   7 class security_Core {
   8         /**
   9          * Escape scring only if told to
  10          */
  11         public static function xss_clean($str) {
  12                 if (config::get_cgi_cfg_key('escape_html_tags')) {
  13                         return str_replace(html::specialchars('<br />'), '<br />', html::specialchars($str));
  14                 }
  15                 return $str;
  16         }
  17 }