HackerOne Bug Bounty Disclosure: rails-html-sanitizer-allowed-uri-returns-true-for-entity-encoded-control-character-split-javascript-urls-smlee - https://www.redpacketsecurity.com/hackerone-bugbounty-disclosure-rails-html-sanitizer-allowed-uri-returns-true-for-entity-encoded-control-character-split-javascript-urls-smlee/





