For the majority of user, nothing further is required. The update prevents users without permission to use an input filter that allows javascript from using it in the custom user message field.
If you have used javascript in the custom user message, you must change the input filter on the message to a format that supports javascript.
This fixed a few issues, but I think this is as "done" as the D6 branch will get. I'm going to focus on D7. If someone is interested in maintain the D6 branch, let me know.
This is the first (and possible only) release the 4.7 version of this module. I think there are more people interested in a version that works with Drupal 5 at this point.