Fixed #641: Generating the current route with additional or changed arguments allows code injections