"Two security fixes: the``Rank""and``Match""inputs are now being error-checked to make sure they are numeric."
They were accepted without validation, and it was possible to enter HTML strings in the parameters.