XSS am I doing it wrong? CI / php

[emma93]

I am working on an public facing interface that makes use of a database that is effectively untrusted due to multiple applications accessing it.I would like a clean way of encoding all my output to UTF-8 with htmlentities to prevent XSS.Codeigniter (CI) has nothing built in. The filter that is there is meant for input and does not actually filter all XSS attacks.I would prefer a blanket fix but don