I would recommend avoid to_sym, as there's always a risk of using user input in the original string later, alghouth it seems there is not DoS now, it's just safer to convert the symbols in the conditions to strings.