rails Actionview Vulnerabilities