禁用codeigniter xss过滤或在其上运行

Question

I have a codeigniter website and i've turned on global xss filtering and i've developed the website like this. I observed that i can't pass e-mails as get parameter no more . ex: www.foo.com/data?email=[e-mail]

I wonder how i can pass the email as parameter keeping the global xss filtering on, as i don't want to add a lot of xss_clean('data').

I thought about splitting it in pieces like www.foo.com/data?id=example&domain=dot&ext=com but i don't know if this is the best idea. Any suggestions?

Answer 1

Are you URL-encoding the email?

[e-mail] should become name%40domain.com