https://www.systemtek.co.uk/2018/01/ruby-rails-gem-cross-site-scripting-vulnerability/