avoid DoS by not converting params into symbols