Vulnerabilities in rails-html-sanitizer