Remove nested params which was only being used by an XSS bug