xss_clean是否有必要通过网络从数据库中获取数据？

Question

Currently i am working on xmlrpc library of codeigniter. we are fetching data from delphi to xmlrpc where it is being proceesed by xmlrpc. But on debugging i found that xmlrpc is taking too much time in processing data and half of the that time is being consumed by xss_clean . there is one method Decode which is cleaning(xss_cleaning) the data in codeigniter xmlrpc 1.7 . my question is can we remove that xss_clean part as it is consuming lots of time ? **is it a good practice to xss_clean the database output received over newtwork ?**
is there any alternate to optimize xmlrpc processing ?

Answer 1

The CodeIgniter Documentation on XMLRPC states:

There are two additional configuration keys you may make use of when initializing the server class: debug can be set to TRUE in order to enable debugging, and xss_clean may be set to FALSE to prevent sending data through the Security library's xss_clean function.

If you trust the source, then don't bother with xss.

∴ Use: $config['xss_clean'] = FALSE;