[CVE-2015-3226] XSS Vulnerability in ActiveSupport::JSON.encode (groups.google.com)