Use PredicateBuilder for sql hash sanitization

1 files changed, 4 insertions, 2 deletions

diff --git a/activerecord/lib/active_record/relation/predicate_builder.rb b/activerecord/lib/active_record/relation/predicate_builder.rb
index 223eb71885..478d2cb597 100644
--- a/activerecord/lib/active_record/relation/predicate_builder.rb
+++ b/activerecord/lib/active_record/relation/predicate_builder.rb
@@ -20,11 +20,13 @@ module ActiveRecord
             arel_table = Arel::Table.new(table_name, @engine)
           end
 
+          attribute = Arel::Attribute.new(arel_table, column.to_sym)
+
           case value
           when Array, Range, ActiveRecord::Associations::AssociationCollection, ActiveRecord::NamedScope::Scope
-            arel_table[column].in(value)
+            attribute.in(value)
           else
-            arel_table[column].eq(value)
+            attribute.eq(value)
           end
         end
       end