action text Rails Vulnerabilities