Cross-site Scripting (XSS)

Snyk is reporting a Medium security vulnerability due to un-escaped single quotes. https://security.snyk.io/vuln/SNYK-RUBY-ERUBIS-20482

I do see some PRs open addressing this issue but have not had any attention #19 and #18 

Any updates or help you need to get this issue resolved and to the finish line?

Thanks.