[ASA-201910-4] ruby-rdoc: cross-site scripting