[WIP] SQL injection in Products::Find causing `undefined method distinct for nil:NilClass`

[mbajur]

Recently, an attacker attempted to inject an SQL statement via the sort_by param for TaxonsController#show on my shop. Even though the attack didn't succeeded, it produced several thousand exception reports for:

This PR aims to make sure given scenario does not produce 500 error.

[github-actions[bot]]

All contributors have signed the CLA ✍️ ✅
_{Posted by the CLA Assistant Lite bot.}

[mbajur]

I have read the CLA Document and I hereby sign the CLA