XSS In Controller Index

We first check to see if `$args[3]` is set, if it is set we sanitize it, otherwise default to empty.