This catches `a=b` in the URI path. Meant to check the query string alone?

Would prob be safer to parse the URI, filter the query params, then reconstruct it.