Permit explicit "http_safe=0" for GET/POST.