Merge pull request #1194 from dbauszus-glx/query-substitute-error

Throw error for invalid query parameter substitution

mod/query.js

@@ -168,9 +168,7 @@ module.exports = async (req, res) => {
         // Change value may only contain a limited set of whitelisted characters.
         if (!reserved.has(param) && !/^[A-Za-z0-9,"'._-\s]*$/.test(change)) {
 
-          // Err and return empty string if the change value is invalid.
-          console.error('Change param no bueno')
-          return ''
+          throw new Error(`Substitute \${${param}} value rejected: ${change}`);
         }
 
         return change