File 0001_CVE-2018-3741-xss_vulnerability.patch of Package rubygem-rails-html-sanitizer.25526
--- rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb.old 2019-08-02 11:21:18.413347885 +0200
+++ rails-html-sanitizer-1.0.3/lib/rails/html/scrubbers.rb 2019-08-02 11:21:48.785346493 +0200
@@ -152,6 +152,8 @@
end
node.remove_attribute(attr_node.name) if attr_name == 'src' && attr_node.value !~ /[^[:space:]]/
+
+ Loofah::HTML5::Scrub.force_correct_attribute_escaping! node
end
end