Issue #1257326 by drozas: All variables are now sanitized in hook_block(). Readme file extended with some configuration examples