So far it only happens in query string params. Should also consider doing it to param names in addition to the values