updating uglifier to 2.7.2 due to security issue.

BACKDOORING VIA ERRONEOUS MINIFCATION OF BOOLEAN EXPRESSION lautis/uglifier#86 Trello: https://trello.com/c/x6w9tlVh/906-backdooring-via-erroneous-minifcation-of-boolean-expression
fiedl · Aug 31, 2015 · 4e407e7 · 4e407e7
1 parent 7ca7a46
commit 4e407e7
Show file tree

Hide file tree

Showing 3 changed files with 25 additions and 21 deletions.
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -91,6 +91,7 @@ PATH
       transaction_retry
       turboboost
       turbolinks (>= 2.5.3)
+      uglifier (>= 2.7.2)
       web-console (>= 2.1.3)
       will_paginate (> 3.0)
       workflow_kit (~> 0.0.7)
@@ -141,7 +142,7 @@ GEM
     addressable (2.3.8)
     ambry (0.3.1)
     arel (6.0.0)
-    autoprefixer-rails (5.2.1.1)
+    autoprefixer-rails (5.2.1.3)
       execjs
       json
     autosize-rails (1.18.17)
@@ -204,7 +205,7 @@ GEM
     daemons (1.2.3)
     database_cleaner (1.4.1)
     debug_inspector (0.0.2)
-    devise (3.5.1)
+    devise (3.5.2)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 3.2.6, < 5)
@@ -229,8 +230,8 @@ GEM
       launchy (~> 2.1)
       mail (~> 2.2)
     erubis (2.7.0)
-    eventmachine (1.0.7)
-    execjs (2.5.2)
+    eventmachine (1.0.8)
+    execjs (2.6.0)
     factory_girl (4.5.0)
       activesupport (>= 3.0.0)
     factory_girl_rails (4.5.0)
@@ -339,7 +340,7 @@ GEM
       ambry (~> 0.3.0)
     method_source (0.8.2)
     mime-types (1.25.1)
-    mini_magick (4.2.7)
+    mini_magick (4.2.10)
     mini_portile (0.6.2)
     minitest (5.7.0)
     multi_json (1.11.1)
@@ -354,7 +355,7 @@ GEM
     orm_adapter (0.5.0)
     passgen (1.0.2)
     pdf-core (0.5.1)
-    phony (2.14.10)
+    phony (2.14.14)
     poltergeist (1.6.0)
       capybara (~> 2.1)
       cliver (~> 0.3.1)
@@ -373,7 +374,7 @@ GEM
       i18n (>= 0.5.0)
       railties (>= 3.0.0)
     rack (1.6.2)
-    rack-mini-profiler (0.9.6)
+    rack-mini-profiler (0.9.7)
       rack (>= 1.1.3)
     rack-protection (1.5.3)
       rack
@@ -423,7 +424,7 @@ GEM
       actionpack (~> 4)
       redis-rack (~> 1.5.0)
       redis-store (~> 1.1.0)
-    redis-activesupport (4.1.0)
+    redis-activesupport (4.1.1)
       activesupport (~> 4)
       redis-store (~> 1.1.0)
     redis-namespace (1.5.2)
@@ -554,7 +555,7 @@ GEM
       polyglot
       polyglot (>= 0.3.1)
     ttfunk (1.4.0)
-    turboboost (0.0.12)
+    turboboost (0.1.0)
       coffee-rails
       jquery-rails
       railties
@@ -563,7 +564,7 @@ GEM
       coffee-rails
     tzinfo (1.2.2)
       thread_safe (~> 0.1)
-    uglifier (2.7.1)
+    uglifier (2.7.2)
       execjs (>= 0.3.0)
       json (>= 1.8.0)
     unf (0.1.4)

diff --git a/demo_app/my_platform/Gemfile.lock b/demo_app/my_platform/Gemfile.lock
@@ -91,6 +91,7 @@ PATH
       transaction_retry
       turboboost
       turbolinks (>= 2.5.3)
+      uglifier (>= 2.7.2)
       web-console (>= 2.1.3)
       will_paginate (> 3.0)
       workflow_kit (~> 0.0.7)
@@ -141,7 +142,7 @@ GEM
     addressable (2.3.8)
     ambry (0.3.1)
     arel (6.0.0)
-    autoprefixer-rails (5.2.1.1)
+    autoprefixer-rails (5.2.1.3)
       execjs
       json
     autosize-rails (1.18.17)
@@ -204,7 +205,7 @@ GEM
     daemons (1.2.3)
     database_cleaner (1.4.1)
     debug_inspector (0.0.2)
-    devise (3.5.1)
+    devise (3.5.2)
       bcrypt (~> 3.0)
       orm_adapter (~> 0.1)
       railties (>= 3.2.6, < 5)
@@ -229,8 +230,8 @@ GEM
       launchy (~> 2.1)
       mail (~> 2.2)
     erubis (2.7.0)
-    eventmachine (1.0.7)
-    execjs (2.5.2)
+    eventmachine (1.0.8)
+    execjs (2.6.0)
     factory_girl (4.5.0)
       activesupport (>= 3.0.0)
     factory_girl_rails (4.5.0)
@@ -339,7 +340,7 @@ GEM
       ambry (~> 0.3.0)
     method_source (0.8.2)
     mime-types (1.25.1)
-    mini_magick (4.2.7)
+    mini_magick (4.2.10)
     mini_portile (0.6.2)
     minitest (5.7.0)
     multi_json (1.11.2)
@@ -354,7 +355,7 @@ GEM
     orm_adapter (0.5.0)
     passgen (1.0.2)
     pdf-core (0.5.1)
-    phony (2.14.10)
+    phony (2.14.14)
     poltergeist (1.6.0)
       capybara (~> 2.1)
       cliver (~> 0.3.1)
@@ -373,7 +374,7 @@ GEM
       i18n (>= 0.5.0)
       railties (>= 3.0.0)
     rack (1.6.4)
-    rack-mini-profiler (0.9.6)
+    rack-mini-profiler (0.9.7)
       rack (>= 1.1.3)
     rack-protection (1.5.3)
       rack
@@ -423,7 +424,7 @@ GEM
       actionpack (~> 4)
       redis-rack (~> 1.5.0)
       redis-store (~> 1.1.0)
-    redis-activesupport (4.1.0)
+    redis-activesupport (4.1.1)
       activesupport (~> 4)
       redis-store (~> 1.1.0)
     redis-namespace (1.5.2)
@@ -554,7 +555,7 @@ GEM
       polyglot
       polyglot (>= 0.3.1)
     ttfunk (1.4.0)
-    turboboost (0.0.12)
+    turboboost (0.1.0)
       coffee-rails
       jquery-rails
       railties
@@ -563,7 +564,7 @@ GEM
       coffee-rails
     tzinfo (1.2.2)
       thread_safe (~> 0.1)
-    uglifier (2.7.1)
+    uglifier (2.7.2)
       execjs (>= 0.3.0)
       json (>= 1.8.0)
     unf (0.1.4)

diff --git a/your_platform.gemspec b/your_platform.gemspec
@@ -149,7 +149,9 @@ Gem::Specification.new do |s|
 
   # Fixes
   # https://github.com/eventmachine/eventmachine/issues/509
-  s.add_dependency 'eventmachine', '>= 1.0.7' 
+  s.add_dependency 'eventmachine', '>= 1.0.7'
+  # https://github.com/lautis/uglifier/pull/86
+  s.add_dependency 'uglifier', '>= 2.7.2' 
 
   # Development Dependencies 
   # --------------------------------------------------------------------------------