action_controller_overview.md: deobfuscate hash whitelisting

Supercedes #12151.