Bug 1075578: [SECURITY] Improper filtering of CGI arguments
r=dkl,a=sgreen
Bug 1074980: Forbid the { foo => $cgi->param() } syntax to prevent data override
r=dkl,a=sgreen