codeguy/php-the-right-way — pull request #190 by pomle (2012-10-15 07:36:36+00:00)
Title: Suggested change to Cross-Site Scripting Mitigation.

Previous wording read like it suggested to always filter user input by stripping/escaping. This is not true while storing data.

This patch tries to change the paragraph to say that stripping/escaping should only take place before outputting data to the page.