Question

Currently i am working on xmlrpc library of codeigniter.
we are fetching data from delphi to xmlrpc where it is being proceesed by xmlrpc.
But on debugging i found that xmlrpc is taking too much time in processing data and half of the that time is being consumed by xss_clean .
there is one method Decode which is cleaning(xss_cleaning) the data in codeigniter xmlrpc 1.7 .
my question is can we remove that xss_clean part as it is consuming lots of time ?
**is it a good practice to xss_clean the database output received over newtwork ?**
is there any alternate to optimize xmlrpc processing ?

Answer 1

The CodeIgniter Documentation on XMLRPC states:

There are two additional configuration keys you may make use of when
initializing the server class: debug can be set to TRUE in order to
enable debugging, and xss_clean may be set to FALSE to prevent sending
data through the Security library’s xss_clean function.

If you trust the source, then don’t bother with xss.

∴ Use: $config['xss_clean'] = FALSE;