Temporary fix for SA-CORE-2014-004. Fixed in Drupal core 7.31