I know what the null byte is and what it does. I'd be suprised if the "code" in question didn't "disallow" the null byte in the query string.

It is an easy fix, and I'm really suprised vroom's baby goes into error 500 mode because of it.

I know for a fact that vroom is aware of the null byte and all (if not most) of it's implications :)