In Rails 4.2, HTML sanitization has been rewritten using a more secure library. This package includes the old behavior that shipped with Rails 4.2 and before, and is provided as a backwards compatibility layer.