Patches are no longer secret: https://gitlab.com/naughtybits/schemebbs
Things like https://textboard.org/prog/39/30---,,,---,,,---30 or https://textboard.org/prog/39/1-lol will no longer trigger a 500.
Thank you again for discovering that awful bug. I believe your stress tests will hit the nginx cache, so they should be safe.