2015-05-20, 06:36 PM
I guess it could be considered a security issue, so there will likely be a patch for 1.6. I haven't had a chance to look at the code, but the fix shouldn't be too hard. I'll try to get a chance to look at it tomorrow.