EllisLab/CodeIgniter — pull request #2201 by xeptor (2013-01-28 11:47:49+00:00)
Title: Upload library, clean_file_name function: Fix xss bug.

For example: If you clear this string "%%3f3f" according to the $bad array will fail. The result will be "%3f"
Because str_replace() replaces left to right.

Signed-off-by: xeptor