Rails 4: Document XSS Vulnerability in Action View and

Unsafe Query Generation Risk in Active Record

Security: CVE-2016-6316
Security: https://vuxml.freebsd.org/freebsd/43f1c867-654a-11e6-8286-00248c0c745d.html
Security: CVE-2016-6317
Security: https://vuxml.freebsd.org/freebsd/7e61cf44-6549-11e6-8286-00248c0c745d.html

Approved by: pi(mentor)