Address security alert for gem uglifier

Update gem uglifier to >= 2.7.2 to address security alert for affected versions prior to 2.7.2 Sources: lautis/uglifier#86 https://zyan.scripts.mit.edu/blog/backdooring-js/ https://nodesecurity.io/advisories/uglifyjs_incorrectly_handles_non-boolean_comparisons mishoo/UglifyJS#751
fstar-dev · Sep 15, 2015 · fc1da7e · fc1da7e
1 parent e3c1a07
commit fc1da7e
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 4 deletions.
diff --git a/spec/dummy/Gemfile b/spec/dummy/Gemfile
@@ -8,7 +8,7 @@ gem 'sqlite3'
 # Use SCSS for stylesheets
 gem 'sass-rails', '~> 5.0'
 # Use Uglifier as compressor for JavaScript assets
-gem 'uglifier', '>= 1.3.0'
+gem 'uglifier', '>= 2.7.2'
 # Use CoffeeScript for .coffee assets and views
 gem 'coffee-rails', '~> 4.1.0'
 # See https://github.com/rails/execjs#readme for more supported runtimes

diff --git a/spec/dummy/Gemfile.lock b/spec/dummy/Gemfile.lock
@@ -158,7 +158,7 @@ GEM
       coffee-rails
     tzinfo (1.2.2)
       thread_safe (~> 0.1)
-    uglifier (2.7.1)
+    uglifier (2.7.2)
       execjs (>= 0.3.0)
       json (>= 1.8.0)
     web-console (2.2.1)
@@ -189,8 +189,8 @@ DEPENDENCIES
   spring
   sqlite3
   turbolinks
-  uglifier (>= 1.3.0)
+  uglifier (>= 2.7.2)
   web-console (~> 2.0)
 
 BUNDLED WITH
-   1.10.5
+   1.10.6