There's a lingering issue from bug 351 that the Review Request form will publish after saving any 7 fields, even the same field 7 times.  This is because gPublishing is incorrectly initialized to 'true'.

I tried the steps described in bug 351 in both IE and Firefox, and found that the form never spontaneously publishes anymore.  Publishing still works correctly when the button is manually pushed.