Correction to _filter_xss_split()

$m is not always received as an array