diff --git a/lib/wice/wice_grid_serialized_queries_controller.rb b/lib/wice/wice_grid_serialized_queries_controller.rb
index a25ed77a..218b50d8 100644
--- a/lib/wice/wice_grid_serialized_queries_controller.rb
+++ b/lib/wice/wice_grid_serialized_queries_controller.rb
@@ -52,7 +52,7 @@ def create_saved_query  #:nodoc:
       @saved_query.name      = params[:query_name]
       @saved_query.query     = query_params
 
-      @saved_query.attributes = params[:extra] unless params[:extra].blank?
+      @saved_query.attributes = extra unless extra.nil?
 
       if @saved_query.save
         @grid_title_id = "#{@grid_name}_title"
@@ -65,7 +65,7 @@ def create_saved_query  #:nodoc:
     end
 
     def extra #:nodoc:
-      params[:extra]
+      params[:extra].permit! unless params[:extra].nil?
     end
 
     protected