Stored XSS in RDoc hyperlinks through javascript scheme