We can't currently do formvar cleansing.
taking this bug
This has been resolved by moving all formvar checking into the business logic.