From 30b0a84f70c67e55b101abea3c11fc34f8ada01a Mon Sep 17 00:00:00 2001
From: ANDRI ANDRI <47277287+lamcodeofpwnosec@users.noreply.github.com>
Date: Mon, 28 Oct 2024 23:02:23 +0700
Subject: [PATCH] fix(deps): upgrade webrick dep (#1441)

An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."
---
 docs/Gemfile.lock | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock
index a8b2dfa9..99cf583b 100644
--- a/docs/Gemfile.lock
+++ b/docs/Gemfile.lock
@@ -265,7 +265,7 @@ GEM
     unf_ext (0.0.9.1)
     unicode-display_width (1.8.0)
     uri (0.13.0)
-    webrick (1.8.1)
+    webrick (1.8.2)
 
 PLATFORMS
   ruby