EllisLab/CodeIgniter — pull request #3035 by DevelopmentDocumentopia (2014-05-06 15:11:34+00:00)
Title: xss_clean is not escaping GET requests that &item=/startwithslash

/webacd.do?isurlact=true&entactname=/webacd.do
becomes
/webacd.do?isurlact=true&entactname;=/webacd.do

This commit adds / to the regex to it will escape those GET requests

related to issue #3030