File CVE-2022-23515.patch of Package rubygem-loofah.28451
--- loofah-2.2.2/lib/loofah/html5/whitelist.rb.old 2023-03-26 19:11:52.347909975 +0200
+++ loofah-2.2.2/lib/loofah/html5/whitelist.rb 2023-03-26 19:12:46.679908606 +0200
@@ -150,7 +150,7 @@
telnet webcal xmpp callto feed urn aim rsync tag ssh sftp rtsp afs data]
ACCEPTABLE_URI_DATA_MEDIATYPES = Set.new %w[text/plain text/css image/png image/gif
- image/jpeg image/svg+xml]
+ image/jpeg]
# subclasses may define their own versions of these constants
ALLOWED_ELEMENTS = ACCEPTABLE_ELEMENTS + MATHML_ELEMENTS + SVG_ELEMENTS