Title: Additional fix for refleced XSS on index page using start_url
Level: 1
Component: multisite
Class: security
Compatible: compat
State: unknown
Version: 1.2.7i3
Date: 1442565029

The issue has already been addressed in werk #2388, but was not really
fixing the problem for all cases.
