toLowerCase() on all excluded parameters, including when scanner checks