Apply @tenderlove's 2.3 SQL injection fix