Note: the parameter check rejects any named query that uses a QueryString parameter. Not safe for this usage.