Proposed patch :

diff --git a/application/helpers/sanitize_helper.php b/application/helpers/sanitize_helper.php
index 45a545a..f5dac16 100644
--- a/application/helpers/sanitize_helper.php
+++ b/application/helpers/sanitize_helper.php
@@ -185,7 +185,7 @@ function sanitize_xss_string($string)
{
if (isset($string))
{

• $bad = array ('*','^','&','\'',';','\"','(',')','%','$','?');
• $bad = array ('*','^','&',';','\"','(',')','%','$','?');
  return str_replace($bad, '',$string);
  }
  }

Please tell me if I can commit it.