The magic quotes undo should apply to GET variables as well.
Add a patch for lighttpds strange behaviour on server.error-handler-404 routing.