From 77c23b2104d62ab1cf1fb5808fef14e38d094605 Mon Sep 17 00:00:00 2001 From: Pratik Naik Date: Fri, 1 Jan 2010 04:14:34 +0530 Subject: Use PredicateBuilder for sql hash sanitization --- activerecord/lib/active_record/relation/predicate_builder.rb | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'activerecord/lib/active_record/relation') diff --git a/activerecord/lib/active_record/relation/predicate_builder.rb b/activerecord/lib/active_record/relation/predicate_builder.rb index 223eb71885..478d2cb597 100644 --- a/activerecord/lib/active_record/relation/predicate_builder.rb +++ b/activerecord/lib/active_record/relation/predicate_builder.rb @@ -20,11 +20,13 @@ module ActiveRecord arel_table = Arel::Table.new(table_name, @engine) end + attribute = Arel::Attribute.new(arel_table, column.to_sym) + case value when Array, Range, ActiveRecord::Associations::AssociationCollection, ActiveRecord::NamedScope::Scope - arel_table[column].in(value) + attribute.in(value) else - arel_table[column].eq(value) + attribute.eq(value) end end end -- cgit v1.2.3