EllisLab/CodeIgniter — pull request #3037 by DevelopmentDocumentopia (2014-05-06 20:31:35+00:00)
Title: xss_clean is not protecting GET requests that &item=/startwithslash

/webacd.do?isurlact=true&entactname=/webacd.do
becomes
/webacd.do?isurlact=true&entactname;=/webacd.do

This commit adds / to the regex to it will escape those GET requests

related to issue #3030