xss_clean is not protecting GET requests that &item=/startwithslash

/webacd.do?isurlact=true&entactname=/webacd.do
becomes
/webacd.do?isurlact=true&entactname;=/webacd.do

This commit adds / to the regex to it will escape those GET requests

related to issue #3030
Merge pull request #3037 from DevelopmentDocumentopia/xss_clean_patch

xss_clean is not protecting GET requests that &item=/startwithslash
Account for PHP 5.6 changes related to charsets
Remove error-masking '@' in mysqli_driver (See: https://github.com/EllisLab/CodeIgniter/issues/3036)
Added support to Symbian OS platforms to recognize Nokia devices
Prepare image url.
Merge pull request #3040 from adrianorsouza/platform_support

Added support for Symbian OS platforms to recognize Nokia devices
Removed empty line.
[ci skip] Update a comment for CI_Input::input_stream()
Removed empty line
Merge pull request #3041 from egig/develop

Prepare image url.
Merge pull request #3039 from mdunisch/develop

Remove error-masking '@' in mysqli_driver (See: #3036)
Remove (most of) error suppression from database drivers (issue #3036)
Call data_seek(0) only if we've used DB_result::*row*() methods

This should fix HHVM where it throws 'Unable to jump to row 0 on MySQL result index X' error messages for ext/mysqli
Add hash_equals() to ext/hash compat layer

Introduced in PHP 5.6 Beta 1 (unfortunately, still undocumented).
RFC: https://wiki.php.net/rfc/timing_attack

(Yes, I am aware that the RFC talks about hash_compare(), the function was later renamed in the implementation.)
Fix PHP 5.6 charset-related warnings in tests
Suppress PHP 5.6 E_DEPRECATED warnings for mbstring.internal_encoding as well
Merge remote-tracking branch 'upstream/develop' into develop