2017/10/GHSA-9hx9-w2j6-rw76 Script Injection in Show In Browser gem