diff --git a/config/config.inc.php b/config/config.inc.php
index 7157677cd..f21536182 100644
--- a/config/config.inc.php
+++ b/config/config.inc.php
@@ -13,7 +13,7 @@
      * @brief display XE's full version
      * Even The file should be revised when releasing altough no change is made
      **/
-	define('__XE_VERSION__', '1.5.1.9');
+	define('__XE_VERSION__', '1.5.1.10');
     define('__ZBXE_VERSION__', __XE_VERSION__); // deprecated : __ZBXE_VERSION__ will be removed. Use __XE_VERSION__ instead.
 
     /**
diff --git a/modules/document/document.item.php b/modules/document/document.item.php
index 7767fbbf8..8332328d7 100644
--- a/modules/document/document.item.php
+++ b/modules/document/document.item.php
@@ -288,7 +288,7 @@
 
 			if($m[1] == 'param')
 			{
-				if(stripos($m[0], 'allowscriptaccess'))
+				if(strpos(strtolower($m[0]), 'allowscriptaccess'))
 				{
 					$m[0] = '<param name="allowscriptaccess" value="never"';
 					if(substr($m[0], -1) == '/')
@@ -300,13 +300,13 @@
 			}
 			else if($m[1] == 'embed')
 			{
-				if(stripos($m[0], 'allowscriptaccess'))
+				if(strpos(strtolower($m[0]), 'allowscriptaccess'))
 				{
-					$m[0] = str_ireplace(array('always', 'samedomain'), 'never', $m[0]);
+					$m[0] = preg_replace('/always|samedomain/i', 'never', $m[0]);
 				}
 				else
 				{
-					$m[0] = str_ireplace('<embed', '<embed allowscriptaccess="never"', $m[0]);
+					$m[0] = preg_replace('/\<embed/i', '<embed allowscriptaccess="never"', $m[0]);
 				}
 			}
 			return $m[0];