wrapping all request params into url_params

superset/jinja_context.py

@@ -43,7 +43,8 @@ def url_param(param, default=None):
     # Supporting POST as well as get
     if request.form.get('form_data'):
         form_data = json.loads(request.form.get('form_data'))
-        return form_data.get(param, default)
+        url_params = form_data['url_params'] or {}
+        return url_params.get(param, default)
     return default
 
 

superset/utils.py

@@ -836,10 +836,12 @@ def merge_extra_filters(form_data):
 
 
 def merge_request_params(form_data, params):
+    url_params = {}
     for key, value in params.items():
-        if key == 'form_data':
+        if key in ('form_data', 'r'):
             continue
-        form_data[key] = value
+        url_params[key] = value
+    form_data['url_params'] = url_params
 
 
 def get_update_perms_flag():

tests/utils_tests.py

@@ -227,7 +227,8 @@ class UtilsTestCase(unittest.TestCase):
             'dashboard_ids': '(1,2,3,4,5)',
         }
         merge_request_params(form_data, url_params)
-        self.assertIn('dashboard_ids', form_data.keys())
+        self.assertIn('url_params', form_data.keys())
+        self.assertIn('dashboard_ids', form_data['url_params'])
         self.assertNotIn('form_data', form_data.keys())
 
     def test_datetime_f(self):