Security token parsing breaks when url contains ":" sign

PHP shindig doesn't correctly parse security token when url contains ":"

If I have url=http://host:80/gadget.xml, then shindig can't parse properly the following security token

st=o:v:a:d:http://host:80/gadget.xml:1:c
it is parsed into ["o","v","a","d","http","//host","80"], but should be
["o","v","a","d","http://host:80/gadget.xml","1","c"]