This test apparently fails even after my patches! Looks like I need to have a word with Metasearch :cop:
Fist though, I need to confirm that this is actually exploitable in production. Normally Metasearch raises an exception (hence the `allow-rescue` line), so in production the logic might flow differently.