https://tsecurity.de/de/1561852/IT+Reverse+Engineering/Sicherheitsl%C3%BCcken/CVE-2015-7578+%7C+Ruby+on+Rails+3.0%2F4.0+rails-html-sanitizer+cross+site+scripting+%28BID-81802+%2F+XFDB-110101%29/