Tumblr's security problem exists in CI

[eluser]Joakal[/eluser]
Another suggested fix:

ob_start();
include("config.php");
ob_end_clean();

http://au2.php.net/manual/en/function.ob-start.php

It gets put into PHP overhead though rather than ignoring potential output.