X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/0f644e242ef37c911ad3dc25aca8135c339de349..917330c81bb370225ccd0e051dbdca3d1870710e:/apps/workbench/app/views/pipeline_instances/show.html.erb

diff --git a/apps/workbench/app/views/pipeline_instances/show.html.erb b/apps/workbench/app/views/pipeline_instances/show.html.erb
index 881d77102c..e573bf52a2 100644
--- a/apps/workbench/app/views/pipeline_instances/show.html.erb
+++ b/apps/workbench/app/views/pipeline_instances/show.html.erb
@@ -23,7 +23,7 @@ SPDX-License-Identifier: AGPL-3.0 %>
 
   <div id="pipeline-instance-tab-buttons"
        class="pane-loaded arv-log-event-listener arv-refresh-on-state-change"
-       data-pane-content-url="<%= url_for(params.merge(tab_pane: "tab_buttons")) %>"
+       data-pane-content-url="<%= url_for(params.permit!.merge(tab_pane: "tab_buttons")) %>"
        data-object-uuid="<%= @object.uuid %>"
        >
     <%= render partial: 'show_tab_buttons', locals: {object: @object}%>