@Test
public void testTrickyParametersInBody() throws Exception {
MakeRequestClient client = makeSignedFetchClient("o", "v", "http://www.example.com/app");
String tricky = "%6fpensocial_owner_id=gotcha";
HttpResponse resp = client.sendFormPost(FakeOAuthServiceProvider.RESOURCE_URL, tricky);
assertEquals(OAuthError.INVALID_PARAMETER.name(),
resp.getMetadata().get(OAuthResponseParams.ERROR_CODE));
checkStringContains("Wrong error text", resp.getMetadata().get("oauthErrorText"),
"Invalid parameter name opensocial_owner_id, applications may not override " +
"oauth, xoauth, or opensocial parameters");