Merge pull request #2075 from sourcejedi/patch-1

doc: xss_clean() method is in Security, not Input