input is URL, how to protect it from xss

Question

I have a form text field that accepts a url. When the form is submitted, I insert this field into the database with proper anti-sql-injection. My question though is about xs

Answer 1

You need to encode it with htmlspecialchars before displaying to a user. Usually this is enough when dealing with data outside of