Don't keep Gemfile.lock in version control
Drop the Dockerfile

Thanks for it @StanAngeloff. It was really useful during our testing.
Let escapeHTML be more paranoid
Avoid monkey patching ActionController::Base#initialize

Just inverting a condition does it.