Fix security warnings from brakeman

app/models/concerns/filterable_concern.rb

@@ -22,7 +22,7 @@ def filter_by_associations(associations)
         Array(attrs).each do |attr|
           filter_name = "#{name}_#{attr}"
           scope "filter_by_#{filter_name}", ->(value) {
-            joins(name).where("#{name}.#{attr}" => value)
+            joins(name.to_sym).where(name => {attr => value})
           }
 
           self::VALID_FILTERS.push(filter_name.to_s)

app/models/media_listener.rb

@@ -32,6 +32,6 @@ def running?
   private
 
   def run(command)
-    system "bundle exec #{SERVICE_PATH} #{command} -d #{self.class.config.pid_dir} -n #{self.class.config.service_name}"
+    system "bundle exec #{SERVICE_PATH.shellescape} #{command.shellescape} -d #{self.class.config.pid_dir.shellescape} -n #{self.class.config.service_name.shellescape}"
   end
 end

test/system/setting_test.rb

@@ -16,7 +16,6 @@ class SettingSystemTest < ApplicationSystemTestCase
     assert_text("Updated successfully")
   end
 
-
   test "update discogs token" do
     visit setting_url