There is a patch available for fixing this, but that breaks some other scenarios. Unfortunately, this kind of got lost in the whole mailing list traffic…
I will raise this at the next monthly telephone conference. There are some other firewall CGI oddities to be clarified, so I guess this makes sense.