Merge pull request #32 from curationexperts/sanitizer_update

Upgrade rails-html-sanitizer to address CVE-2018-3741
curationexperts · Apr 27, 2018 · f81d417 · f81d417
2 parents 09f0539 + 241195f
commit f81d417
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -113,7 +113,7 @@ GEM
       simplecov (>= 0.7)
       term-ansicolor
       thor
-    crass (1.0.3)
+    crass (1.0.4)
     deep_merge (1.2.1)
     deprecation (1.0.0)
       activesupport
@@ -279,8 +279,8 @@ GEM
     rails-dom-testing (2.0.3)
       activesupport (>= 4.2.0)
       nokogiri (>= 1.6)
-    rails-html-sanitizer (1.0.3)
-      loofah (~> 2.0)
+    rails-html-sanitizer (1.0.4)
+      loofah (~> 2.2, >= 2.2.2)
     railties (5.1.5)
       actionpack (= 5.1.5)
       activesupport (= 5.1.5)