https://wp.jochen.hayek.name/blog-en/2010/08/18/ruby-update-closes-xss-vulnerability-the-h-security-news-and-features/