Currently, all queries are allowed using an explicit flag `AllowCustomQueryParameters`. However, these should be validated per the spec.