Patch Rails against number_to_currency XSS。