Kohana v2.x - Bug Report #2766: xss_clean() doesn't handle attribute injection - Kohana Development
http://dev.kohanaphp.com/issues/2766
"Added by Rasmus Lerdorf"
kohanaqueue - Google Code
http://code.google.com/p/kohanaqueue
Home – Kohana: Swift, Secure, and Small PHP 5 Framework
http://www.kohanaphp.com/home.html
My current favorite PHP framework. Strangely, I found I hadn't bookmarked this already.