rails/rails — pull request #3305 by cjolly (2011-10-12 04:31:26+00:00)
Title: Exclude rack.request.form_vars from request.filtered_env

Filter `rack.request.form_vars` along with the already excluded `RAW_POST_DATA` from `request.filtered_env` as it is essentially the same potentially sensitive data.

Addresses concerns raised in #337