Consider AC::Parameters as Hash in url_for

Ref: #42020

It's not uncommon to want to forward request parameters,
as such the `:params` paramter of `url_for` often receive
an AC::Parameters instance.

actionpack/lib/action_dispatch/routing/route_set.rb

@@ -822,10 +822,12 @@ def url_for(options, route_name = nil, url_strategy = UNKNOWN, method_name = nil
         path = route_with_params.path(method_name)
         params = route_with_params.params
 
-        if options[:params].is_a?(Hash)
-          params.merge! options[:params]
-        elsif options.key? :params
-          params[:params] = options[:params]
+        if options.key? :params
+          if options[:params]&.respond_to?(:to_hash)
+            params.merge! options[:params]
+          else
+            params[:params] = options[:params]
+          end
         end
 
         options[:path]        = path

actionpack/test/controller/url_for_test.rb

@@ -362,6 +362,15 @@ def test_params_option
         assert_equal({ id: "1" }.to_query, params[1])
       end
 
+      def test_params_option_strong_parameters
+        request_params = ActionController::Parameters.new({ domain: "foo", id: "1", other: "BAD" })
+        url = W.new.url_for(only_path: true, controller: "c", action: "a", params: request_params.permit(:domain, :id))
+        params = extract_params(url)
+        assert_equal("/c/a?domain=foo&id=1", url)
+        assert_equal({ domain: "foo" }.to_query, params[0])
+        assert_equal({ id: "1" }.to_query, params[1])
+      end
+
       def test_non_hash_params_option
         url = W.new.url_for(only_path: true, controller: "c", action: "a", params: "p")
         params = extract_params(url)