I think this is a good bug find, but I don't know why anyone would pass the original "safe" input through unchanged, instead of reserializing it.