From 0887f47a7a5a90ca3b5240ff087d5b4ffc6f2877 Mon Sep 17 00:00:00 2001 From: Pau Perez Date: Tue, 3 Apr 2018 11:50:27 +0200 Subject: [PATCH] Upgrade loofah to fix security vulnerability This fixes the security vulnerability on Loofah 2.2.0 Github reported. See https://github.com/flavorjones/loofah/issues/144 for details. --- Gemfile.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 3032c85f9..fb5b77c75 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -189,7 +189,7 @@ GEM i18n (~> 0.4) json rest-client - loofah (2.2.0) + loofah (2.2.2) crass (~> 1.0.2) nokogiri (>= 1.5.9) mail (2.7.0) @@ -245,8 +245,8 @@ GEM activesupport (>= 4.2.0, < 5.0) nokogiri (~> 1.6) rails-deprecated_sanitizer (>= 1.0.1) - rails-html-sanitizer (1.0.3) - loofah (~> 2.0) + rails-html-sanitizer (1.0.4) + loofah (~> 2.2, >= 2.2.2) rails-i18n (4.0.3) i18n (~> 0.6) railties (~> 4.0)