Add writeup about security fix
Use new is_empty_array() and is_nonempty_array() functions