Here is a version 2.12 of rsobj.php. It allows you to set the default for cross site protection in the object on line 11 site wide. You can still override it for individual recordsets or getColumnVal() calls.
I've updated the syntax above to reflect the new v2.12 syntax, but you can also just change the global setting.