[XSS] More exotic charset awareness added to script injection checks (thanks Masato Kinugawa for reporting) x [XSS] Removed limited injection chance allowing redirection of XSS vulnerable pages to an integral IP (thanks Masato Kinugawa for reporting) + "Security Downgrade Warning" suggests blacklist mode as a
better option
than uninstalling, to retain scripting-unrelated protections - Removed legacy uninstall hooks and related localized strings
v 2.6.5.1 ========================================================================= + [XSS] Forced unicode conversions more resilient to invalid input (thanks Masato Kinugawa for reporting)