EllisLab/CodeIgniter — pull request #1366 by aphofstede (2012-05-16 22:30:40+00:00)
Title: Check cookie against md5 regex. 2.1 stable CSRF injection security fix

Otherwise, cookie can contain arbitrary injected code that gets sent
back directly to the browser.