Now use htmlawed to clean input params on frontend forms.