RESTful parameters for paths, queries come together. In this situation, there really is no correct answer. The only way I can see to solve the problem is simply not to use path parameters to solve ...

As such, Firefox 87 will introduce "strict-origin-when-cross-origin" as default in the browser's Referrer Policy, which will cut away sensitive user information -- including path and query string ...