Matthew Brennan
Results
3
comments of
Matthew Brennan
#330 and #438 address layout, but maybe not specifically "columns"
There's additional discussion in rails/rails#39643. I haven't validated myself, but some googling gave an example exploit here https://trustfoundry.net/2016/08/23/referer-redirection-inconspicuous-danger/