FuelPHP Forums

Ok, this is my second day using FuelPHP, I come from codeigniter (as many) searching for a framework that suits my taste (more than my needs) And I tried something that in CI would not happen (unless you touch the config) I have a controller, and a method recieves something, lets say

public function action_world($name = '') {
  $this->response->body($name);
 }

But see what happens if as $name I recieve something between h1 tags like: <h1>Tomas</h1> It won't clean anything, I tried echoing Security::xss_clena($name) and I always get the same thing (not working even with script tag) so here is the problem, in CI you have some chars that are "whitelisted" and IMHO you should do the same, maybe I'm missing something but I don't think so, I checked the config.php file and everything is ok htmlentities is set for uri_filter
BTW I've tried DooPHP also and I like you both something that they do better than you is commenting every function of the framework, you can build an api browser with phpdoc util, as suggestion, maybe you should change request/response tipe from object to the right class so we can use code hinting features on IDE's rather than reading the docs online, and also use phpdoc in those classes as they are missing it