ID#234: switched to RequestImpl.
ID#239: always escape "action" attribute to increase security with custom "action" values.
ID#234: switched to RequestImpl (part II).