Whitelist query params.