SQL Injection Warning in app/models/product.rb

[glenv]

Security issue from Hakiri: Possible SQL injection in app/models/product.rb

refer to http://guides.rubyonrails.org/active_record_querying.html#conditions