Merge pull request #136 from gtt-project/fix/brakeman-warning

Fixed Brakeman false warning

Author: sanak

lib/redmine_gtt/patches/issue_query_patch.rb

@@ -141,15 +141,15 @@ def find_center_point
       end
 
       def distance_query(lng, lat)
-        "ST_DistanceSphere(#{Issue.table_name}.geom, ST_GeomFromText('POINT(#{lng} #{lat})',4326))"
+        Arel.sql("ST_DistanceSphere(#{Issue.table_name}.geom, ST_GeomFromText('POINT(#{lng.to_f} #{lat.to_f})',4326))")
       end
 
       def load_distances(issues, center_point)
         lng, lat = center_point
         distances = Hash[
           Issue.
             where(id: issues.map(&:id)).
-            pluck(:id, Arel.sql("#{distance_query(lng, lat)}"))
+            pluck(:id, distance_query(lng, lat))
         ]
         issues.each{|i| i.instance_variable_set :@distance, distances[i.id]}
       end