[FIXED] Backslash confusion attacks properly handled