False positive: "Render path contains parameter value" for "render @clients"

[mltsy]

I have a view that uses render @clients to render a collection of clients as a partial.

The controller code that sets the @clients collection involves values from the params hash, as is fairly common:

@clients = Client.includes(:domain).where("clients.name LIKE ? OR domains.name LIKE ?",
  "%#{params[:search]}%", "%#{params[:search]}%").[...]

I don't know if that's why, but for some reason brakeman is reporting:

Render path contains parameter value

[presidentbeef]

Hi Joe,

Yes, seems that's why. I think this is similar to #529 which I should come back around to.