Use rack protection escaped params.