In the sample codes, I can see that you already set up the above as true.

But in your models, you still call the my_security_helper and use the xss_clean on the string values.

I did the same as you did. But would it be necessary to call xss_clean if the Thanks!