fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855]

Conflicts:
	actionpack/lib/action_controller/vendor/html-scanner/html/sanitizer.rb