From 438f59e74e189ad871d6339724fde752152298dc Mon Sep 17 00:00:00 2001 From: Joseph Doherty Date: Sun, 24 May 2026 08:18:49 -0400 Subject: [PATCH] fix(transport): add 'Parameters' to blocker-scan denylist Inbound API scripts access request parameters via the Parameters runtime API root (Parameters.x or Parameters["x"]). The blocker heuristic was flagging it as a missing SharedScript or ExternalSystem on bundles that include ApiMethod scripts. Same surgical fix as the other entries on KnownNonReferenceNames. --- src/ScadaLink.Transport/Import/BundleImporter.cs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/ScadaLink.Transport/Import/BundleImporter.cs b/src/ScadaLink.Transport/Import/BundleImporter.cs index 0ad0247..b1741b9 100644 --- a/src/ScadaLink.Transport/Import/BundleImporter.cs +++ b/src/ScadaLink.Transport/Import/BundleImporter.cs @@ -461,8 +461,8 @@ public sealed class BundleImporter : IBundleImporter "Connection", "CreateCommand", "Database", "ExecuteAsync", "ExecuteNonQueryAsync", "ExecuteReaderAsync", "ExecuteScalarAsync", "ExternalSystem", "GetAsync", "GetAttribute", "Instance", "Notify", - "Request", "Response", "Route", "Scheduler", "Scripts", "Send", - "SetAsync", "SetAttribute", + "Parameters", "Request", "Response", "Route", "Scheduler", "Scripts", + "Send", "SetAsync", "SetAttribute", // SQL keywords commonly seen inside string literals "COUNT", "FROM", "GROUP", "INSERT", "JOIN", "ORDER", "SELECT",