Currently I think for arrays in query parameters, the logic erroneously assumes the contents are a string, and does not validate them