Ruby: prepare test case whitespace

Author: alexrford

ruby/ql/test/query-tests/security/cwe-089/ActiveRecordInjection.rb

@@ -8,6 +8,10 @@ class User < ApplicationRecord
   def self.authenticate(name, pass)
     # BAD: possible untrusted input interpolated into SQL fragment
     find(:first, :conditions => "name='#{name}' and pass='#{pass}'")
+    # BAD: interpolation in array argument
+    # find(:first, conditions: ["name='#{name}' and pass='#{pass}'"])
+    # GOOD: using SQL parameters
+    # find(:first, conditions: ["name = ? and pass = ?", name, pass])
   end
 
   def self.from(user_group_id)
@@ -117,7 +121,7 @@ def some_request_handler
 
     # BAD: executes `SELECT users.* FROM #{params[:tab]}`
     # where `params[:tab]` is unsanitized
-    User.all.from(params[:tab]) 
+    User.all.from(params[:tab])
     # BAD: executes `SELECT "users".* FROM (SELECT "users".* FROM "users") #{params[:sq]}
     User.all.from(User.all, params[:sq])
   end