Whats new in 2.2[R4]
- Changed is_writable() to a new function hCoreFileChk()
- Removed the ban for PHP_SELF options 2 and 3. These are experimental and are there for logging purposes only.
- Added HEAD to the whitelist requests list
- Removed 'javascript' and '%3Cscript' from the POST blacklist as this was causing accidental self bans when an admin added javascript code to custom pages.

More...