If you use eg the _analyze api, and mispell the tokenizer, it will happily go on using the standard analyzer (if you have filters specified, it will ignore them as well).

We should remove all leniency from url param parsing, it does not help anyone, but only causes confusion. Rest actions should remove parameters as they are parsed, and fail when there are extras left (eg Unknown parameter "tokenzier" for _analyze)