File 0001_CVE-2018-3741-xss_vulnerability.patch of Package rubygem-rails-html-sanitizer.30440
--- rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb.old 2019-08-02 11:21:18.413347885 +0200 +++ rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb 2019-08-02 11:21:48.785346493 +0200 @@ -152,6 +152,8 @@ end node.remove_attribute(attr_node.name) if attr_name == 'src' && attr_node.value !~ /[^[:space:]]/ + + Loofah::HTML5::Scrub.force_correct_attribute_escaping! node end end