Comment 3 for bug 732614

I had began working on the fixes but then set them aside and never completed them.

The good news is that Sebastian Krahmer submitted a patch which fixed nearly all of these issues (plus some others) in a more complete manner than what I had written. It has been committed to trunk as revno 705. I fixed (5) in revno 706.

(4) is not fixed by either of these revisions. It does not sound to me like it has security implications, but please let me know if I'm missing something. I'll open a new, non-security bug for it.