Web Api : Keeping security threat in mind, should I include parameters in Header or Url?

Question

I am trying to make my website more secure and would like to avoid any security threat that could come in.

I have several API methods and each accepts different param