fix(transport): add 'Parameters' to blocker-scan denylist

Inbound API scripts access request parameters via the Parameters
runtime API root (Parameters.x or Parameters["x"]). The blocker
heuristic was flagging it as a missing SharedScript or ExternalSystem
on bundles that include ApiMethod scripts. Same surgical fix as the
other entries on KnownNonReferenceNames.
This commit is contained in:
Joseph Doherty
2026-05-24 08:18:49 -04:00
parent 901fd58a32
commit 438f59e74e

View File

@@ -461,8 +461,8 @@ public sealed class BundleImporter : IBundleImporter
"Connection", "CreateCommand", "Database", "ExecuteAsync", "Connection", "CreateCommand", "Database", "ExecuteAsync",
"ExecuteNonQueryAsync", "ExecuteReaderAsync", "ExecuteScalarAsync", "ExecuteNonQueryAsync", "ExecuteReaderAsync", "ExecuteScalarAsync",
"ExternalSystem", "GetAsync", "GetAttribute", "Instance", "Notify", "ExternalSystem", "GetAsync", "GetAttribute", "Instance", "Notify",
"Request", "Response", "Route", "Scheduler", "Scripts", "Send", "Parameters", "Request", "Response", "Route", "Scheduler", "Scripts",
"SetAsync", "SetAttribute", "Send", "SetAsync", "SetAttribute",
// SQL keywords commonly seen inside string literals // SQL keywords commonly seen inside string literals
"COUNT", "FROM", "GROUP", "INSERT", "JOIN", "ORDER", "SELECT", "COUNT", "FROM", "GROUP", "INSERT", "JOIN", "ORDER", "SELECT",