documented xss_clean options array