Ensure params are passed as keyword arguments to database queries

[david-yz-liu]

Motivation and Context

Three issues reported by GitHub's CodeQL:

• https://github.com/MarkUsProject/Markus/security/code-scanning/14
• https://github.com/MarkUsProject/Markus/security/code-scanning/15
• https://github.com/MarkUsProject/Markus/security/code-scanning/16

These are false positives in that we use permit! to ensure correct structure and whitelisting of the user params. However, I've modified the code to not just pass in the filtered params directly.

Your Changes

Description: Extract the single relevant param (course_id) in one case; use the double splat operator in the other two cases.

Type of change (select all that apply):

• Refactoring (internal change to codebase, without changing functionality)

Testing

Tested manually and by running the test suite.

Questions and Comments (if applicable)

Checklist

• I have performed a self-review of my own code.
• I have verified that the pre-commit.ci checks have passed.
• I have verified that the CI tests have passed.
• I have reviewed the test coverage changes reported on Coveralls.
• I have updated the Changelog.md file.

[coveralls]

Pull Request Test Coverage Report for Build 8870972819

Details

• 6 of 6 (100.0%) changed or added relevant lines in 2 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.001%) to 91.476%

---

Totals
Change from base Build 8862784121:	0.001%
Covered Lines:	39852
Relevant Lines:	42900

---

💛 - Coveralls