ReDoS (Rails::Html::PermitScrubber.scrub_attribute)