2017/10/GHSA-4whc-pp4x-9pf3 jquery-rails and jquery-ujs subject to Exposure of Sensitive Information