File 0001-CVE-2020-5267.patch of Package rubygem-actionview-5_1.26194
--- actionview-5.1.4/lib/action_view/helpers/javascript_helper.rb.old 2020-04-27 13:11:28.515617314 +0200
+++ actionview-5.1.4/lib/action_view/helpers/javascript_helper.rb 2020-04-27 13:12:24.208034709 +0200
@@ -10,7 +10,9 @@
"\n" => '\n',
"\r" => '\n',
'"' => '\\"',
- "'" => "\\'"
+ "'" => "\\'",
+ "`" => "\\`",
+ "$" => "\\$"
}
JS_ESCAPE_MAP["\342\200\250".force_encoding(Encoding::UTF_8).encode!] = "
"