first go at documentation patch for known param exploit