JangoSteve / remotipart

Rails jQuery file uploads via standard Rails "remote: true" forms.
http://os.alfajango.com/remotipart
Other
1k stars 215 forks source link

Method whose arguments are used as raw SQL #205

Open HarishR-amesh opened 5 years ago

HarishR-amesh commented 5 years ago

I'm getting the following warning while using the remotipart with the active scaffold.

Rails: 5.2.3 Ruby: 2.6.3 Active Scaffold: 3.5.2

/Users/user/.rvm/gems/ruby-2.6.3/bundler/gems/remotipart-7092d4fb1c3a/lib/remotipart/middleware.rb:32 DEPRECATION WARNING: Dangerous query method (method whose arguments are used as raw SQL) called with non-attribute argument(s): "model.idASC". Non-attribute arguments will be disallowed in Rails 6.0. This method should not be called with user-provided values, such as request parameters or model attributes. Known-safe values can be passed by wrapping them in Arel.sql(). (called from call at /Users/user/.rvm/gems/ruby-2.6.3/bundler/gems/remotipart-7092d4fb1c3a/lib/remotipart/middleware.rb:32)

Can't seem to figure out what's causing this?