Now a malformed JSON decode will throw an exception cutting the flow and avoiding potential SQL injection.
Now 'rpp' and 'request_page' params are sanitised right before render to avoid potential XSS exploitation
Merge pull request #4 from txau/bug-get-url-xss

Bug get url xss