Prestashop filter input users and security best practices

[tarekoxygene]

I'm developing a module with some forms and request to external webservice, i like to know if i should add an crsf token in the forms (i'm using ajax to submit forms and method POST ) and if tools::getValue function is enough to sanitize input user and  prevent XSS attakcs ?
The user using the form can be not signed in.