rubyonrails Html Sanitizer Vulnerabilities