permitted_uri_chars in application/config.php not working [serious vulnerability]

[eluser]Keat Liang[/eluser]
Bitbucket Issue Tracker Link

some illegal character in URL is not block by the filter

= * , are blocked by the framework
but "^", "`", single quote, and double quote are not blocked by the uri/URL filter

tested with latest CodeIgniter Reactor build 6b1e35f45ca5

some how it broken and not working anymore....