CVE 2013-1855: XSS vulnerability in sanitize_css in Action Pack