Only allow known alternatives as query param overrides
Whitespace
Merge pull request #255 from andrew/secure-params

Only allow known alternatives as query param overrides