added hyphens to allowed characters in GET keys and vals in submitted URLs in xss_clean()
diff --git a/system/libraries/Input.php b/system/libraries/Input.php
index e7bf727..98f2826 100644
--- a/system/libraries/Input.php
+++ b/system/libraries/Input.php
@@ -554,7 +554,7 @@
// 901119URL5918AMP18930PROTECT8198
- $str = preg_replace('|\&([a-z\_0-9]+)\=([a-z\_0-9]+)|i', $this->xss_hash()."\\1=\\2", $str);
+ $str = preg_replace('|\&([a-z\_0-9\-]+)\=([a-z\_0-9\-]+)|i', $this->xss_hash()."\\1=\\2", $str);
/*
* Validate standard character entities