static inline int is_param_delimiter(char c, char delim)
{
	return c == '&' || c == ';' || c == delim;
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.