Fixed #717: Generating the current route with additional or changed arguments allows code injections