Avoid XSS with BBCode input and HTML output Avoid XSS with BBCode input and HTML output codeigniter codeigniter