X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/f4ca9ad94a6bb006d1f3c7ba207837f1736d1247..5e8235cf2b61e0a44c2f74c227fdcf47fa1e5b37:/apps/workbench/app/views/jobs/show.html.erb

diff --git a/apps/workbench/app/views/jobs/show.html.erb b/apps/workbench/app/views/jobs/show.html.erb
index 0c83e9445e..4ac7601c8e 100644
--- a/apps/workbench/app/views/jobs/show.html.erb
+++ b/apps/workbench/app/views/jobs/show.html.erb
@@ -1,6 +1,10 @@
+<%# Copyright (C) The Arvados Authors. All rights reserved.
+
+SPDX-License-Identifier: AGPL-3.0 %>
+
 <% content_for :tab_line_buttons do %>
   <div class="pane-loaded arv-log-event-listener arv-refresh-on-state-change"
-       data-pane-content-url="<%= url_for(params.merge(tab_pane: "job_buttons")) %>"
+       data-pane-content-url="<%= url_for(params.permit!.merge(tab_pane: "job_buttons")) %>"
        data-object-uuid="<%= @object.uuid %>"
        style="display: inline">
   <%= render partial: 'show_job_buttons', locals: {object: @object}%>