Bug 1075578: [SECURITY] Improper filtering of CGI arguments
r=dkl,a=sgreen