fuzz ing a bit and found a bunch of filters:
Also found that the injection point, this should be var_dump () function