Replaced html-scanner with Loofah.

actionview/lib/action_view/test_case.rb

@@ -155,7 +155,7 @@ def view_rendered?(view, expected_locals)
       #
       # Need to experiment if this priority is the best one: rendered => output_buffer
       def response_from_page
-        HTML::Document.new(@rendered.blank? ? @output_buffer : @rendered).root
+        Loofah.document(@rendered.blank? ? @output_buffer : @rendered).root
       end
 
       def say_no_to_protect_against_forgery!

actionview/test/template/form_tag_helper_test.rb

@@ -632,6 +632,6 @@ def protect_against_forgery?
   private
 
   def root_elem(rendered_content)
-    HTML::Document.new(rendered_content).root.children[0]
+    Loofah.fragment(rendered_content).children.first # extract from nodeset
   end
 end