What is XSS ??
Cross-site Scripting (XSS) is a client-side code injection attack. The attacker injects malicious scripts in our website by using a contact form or other any form.
How to Prevent this
This is another best feature of Codeigniter to prevent cross-site scripting enable $config[‘global_xss_filtering’] = TRUE; in the config.php file. It will prevent or filter input data via post or get even cookies also.