Calling the HttpRequest's indexer caused scanning not only of QueryStrin...

Calling the HttpRequest's indexer caused scanning not only of QueryString but also of form variables, cookies and server variables. Turns out, Shibboleth ISAPI extension doesn't like when the Form property on HttpRequest gets called (probably has something to do with .NET request validation). The form collection gets changed and shibboleth throws an error.