https://github.com/opf/openproject/commit/17c666c8dc39a482ca8afa6f3c3fb048ed6428a0 Begin of the insertion

End of the insertion Begin of the deletion

End of the deletion > This commit can be reverted as soon as sprockets 2.12.X is used.

This comment is wrong.

https://groups.google.com/forum/\#\!topic/rubyonrails-security/doAVp0YaTqY

> Fixed Versions: 3.0.0.beta.3, 2.12.3, 2.11.3, 2.10.2, 2.9.4, 2.8.3, 2.7.1, 2.5.1, 2.4.6, 2.3.3, 2.2.3, 2.1.4, 2.0.5

You should use 2.2.3 revision.
https://github.com/sstephenson/sprockets/commit/9b4083fd038d34fdc7ac6ae93c4e414b0a1731f1
https://github.com/sstephenson/sprockets/commit/d61af15199649b110aa66655968295009554db6b

This is PR.
https://github.com/tessi/sprockets/pull/1 Begin of the insertion
End of the insertion