XSS global filter fail

xss global filter doesn't rewrite the global arrays ($_GET,$_POST,$_COOKIE...) when global_xss_filtering = TRUE .

The above code fixes this.