File 0001-CVE-2020-5267.patch of Package rubygem-actionview-5_1.26194
--- actionview-5.1.4/lib/action_view/helpers/javascript_helper.rb.old 2020-04-27 13:11:28.515617314 +0200 +++ actionview-5.1.4/lib/action_view/helpers/javascript_helper.rb 2020-04-27 13:12:24.208034709 +0200 @@ -10,7 +10,9 @@ "\n" => '\n', "\r" => '\n', '"' => '\\"', - "'" => "\\'" + "'" => "\\'", + "`" => "\\`", + "$" => "\\$" } JS_ESCAPE_MAP["\342\200\250".force_encoding(Encoding::UTF_8).encode!] = "
"