not to how that value might have been escaped in order to get passed

Of course! I should have tested first :(

I'm so used to seeing escaping an unescaping not being done when it should, I sometimes assumes it isn't done.