diff options
| author | Akira Matsuda <ronnie@dio.jp> | 2015-04-09 18:20:53 +0900 |
|---|---|---|
| committer | Akira Matsuda <ronnie@dio.jp> | 2015-04-09 18:20:53 +0900 |
| commit | 6c98100620c0e441c0c8334bb079bf7567c2b521 (patch) | |
| tree | e9eb08c393992db2c7f8b776b208c7d7ffefd3e7 | |
| parent | 8c8e9b34d576d2b223345d9073aca28c7975ecd7 (diff) | |
| download | rails-6c98100620c0e441c0c8334bb079bf7567c2b521.tar.gz rails-6c98100620c0e441c0c8334bb079bf7567c2b521.tar.bz2 rails-6c98100620c0e441c0c8334bb079bf7567c2b521.zip | |
redcarpet 3.2.2 has an XSS vulnerability
see: http://www.openwall.com/lists/oss-security/2015/04/07/11
| -rw-r--r-- | Gemfile | 2 | ||||
| -rw-r--r-- | Gemfile.lock | 4 |
2 files changed, 3 insertions, 3 deletions
@@ -30,7 +30,7 @@ gem 'uglifier', '>= 1.3.0', require: false group :doc do gem 'sdoc', '~> 0.4.0' - gem 'redcarpet', '~> 3.2.2', platforms: :ruby + gem 'redcarpet', '~> 3.2.3', platforms: :ruby gem 'w3c_validators' gem 'kindlerb', '0.1.1' end diff --git a/Gemfile.lock b/Gemfile.lock index d054d1e222..82111e1eb3 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -170,7 +170,7 @@ GEM loofah (~> 2.0) rake (10.4.2) rdoc (4.2.0) - redcarpet (3.2.2) + redcarpet (3.2.3) redis (3.2.1) redis-namespace (1.5.1) redis (~> 3.0, >= 3.0.4) @@ -272,7 +272,7 @@ DEPENDENCIES rack-cache (~> 1.2) rails! rake (>= 10.3) - redcarpet (~> 3.2.2) + redcarpet (~> 3.2.3) resque resque-scheduler sdoc (~> 0.4.0) |