flavorjones/loofah — pull request #46 by kaspth (2013-06-23 15:02:13+00:00)
Title: Switched ^ to \A and $ to \z in sanitize_css.

Making sure bad people can't sneak in a newline in their CSS.
See here for more info: http://guides.rubyonrails.org/security.html#regular-expressions.