update action_rendering to permit params and then convert to_h (#337)

zooniverse · Jul 1, 2024 · 7a6384d · 7a6384d
1 parent f815fae
commit 7a6384d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/controllers/concerns/action_rendering.rb b/app/controllers/concerns/action_rendering.rb
@@ -11,7 +11,8 @@ def index
 
   def show
     authorize model_class.where(id: resource_ids)
-    render json: serializer_class.resource(params, nil, current_user: current_user)
+    params.permit!
+    render json: serializer_class.resource(params.to_h, nil, current_user: current_user)
   end
 
   def create