diff --git a/engine/Security.php b/engine/Security.php
index d569eee8..67a436ab 100644
--- a/engine/Security.php
+++ b/engine/Security.php
@@ -196,6 +196,7 @@ public static function sanitizeURL($url)
     public static function runSanitizeURL()
     {
         $_GET = array_map('Security::sanitizeURL', $_GET);
+        $_SERVER = array_map('Security::sanitizeURL', $_SERVER);
     }
 
     /**