Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability"

More: continued here