Protect query methods from insecure parameters:

Raises an exception if ActionController::Parameters are passed directly
to a query method, or are a value passed to a query method.

[ SECURITY-90 ]