3 ms·

There are suggestions that it is possible (potentially easy) for a user to get symbols into the params hash.