This release tightens request handling for malformed form submissions that previously could cause a server error before Rails had a chance to respond cleanly.
Bug Fixes
Requests that send form fields in an ASCII-incompatible charset, including UTF-16 variants, are now rejected with a 400 Bad Request instead of returning a 500.
This helps protect the app from automated scanners that could previously trigger an error during early request parsing, resulting in a bare 500 response with little visible context.