arel can escape the id, so avoid using the database connection

2026-04-26 03:00:59 -04:00 · 2010-12-22 19:20:08 -08:00
parent 83ffb82fb9
commit c7f81f14df
1 changed files with 1 additions and 1 deletions
--- a/activerecord/lib/active_record/relation/predicate_builder.rb
+++ b/activerecord/lib/active_record/relation/predicate_builder.rb
@@ -26,7 +26,7 @@ module ActiveRecord
          when Range, Arel::Relation
            attribute.in(value)
          when ActiveRecord::Base
-            attribute.eq(Arel.sql(value.quoted_id))
+            attribute.eq(value.id)
          when Class
            # FIXME: I think we need to deprecate this behavior
            attribute.eq(value.name)