[yencabulator]

The component that's meant to prevent a debug message from spilling the naughty bits has no reason to inspect data flowing in the other direction.

[hyperpape]

The consequence of this post is that it very much does!

Though I would just leave those strings out of the WAF.