description: A specially crafted HTML fragment can cause Sanitize gem for Ruby to allow non-whitelisted attributes to be used on a whitelisted HTML element.
problem types: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CWE-79)
affected:
{
product: sanitize (ruby gem)
vendor: Ryan Grove
versions:
status: affected, version: < 4.6.3
}