the signature now has a dynamic tail (database() SQL function) to actually extract useful information and provide better detection footprint
post highlights exploit was checking for the whole signature inside an image tag, removed the tail check, so that the tail can be dynamic but signature starts with something previously defined