From 1ca17d9931a733989da47821f1ccdbb1226726bb Mon Sep 17 00:00:00 2001 From: jomo Date: Thu, 9 Apr 2015 14:22:50 +0200 Subject: [PATCH] update redcarpet due to XSS bug http://danlec.com/blog/bug-in-sundown-and-redcarpet --- Gemfile | 2 +- Gemfile.lock | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/Gemfile b/Gemfile index 4bbee9e..7d6f0ff 100644 --- a/Gemfile +++ b/Gemfile @@ -6,7 +6,7 @@ gem 'mysql2' gem 'jquery-rails' gem 'bcrypt-ruby' # To use ActiveModel's has_secure_password gem 'sanitize' -gem 'redcarpet' +gem 'redcarpet', '~> 3.2.3' gem 'hirb' # pretty console output gem 'rb-readline' gem 'rest-client' diff --git a/Gemfile.lock b/Gemfile.lock index 44289d5..b308c0c 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -140,7 +140,7 @@ GEM raindrops (0.13.0) rake (10.2.2) rb-readline (0.5.1) - redcarpet (3.1.1) + redcarpet (3.2.3) rest-client (1.6.7) mime-types (>= 1.16) ruby-graphviz (1.0.9) @@ -203,7 +203,7 @@ DEPENDENCIES rails (= 4.1.0) rails-erd rb-readline - redcarpet + redcarpet (~> 3.2.3) rest-client sanitize sass-rails