Merge pull request #297 from pravi/patch-1

update ruby-sanitize (fixes CVE-2018-3740)
gjtorikian · Jun 27, 2018 · 7dbb50e · 7dbb50e
2 parents 6557280 + 143770a
commit 7dbb50e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Gemfile b/Gemfile
@@ -16,7 +16,7 @@ group :test do
   gem 'minitest'
   gem 'RedCloth',           '~> 4.2.9', require: false
   gem 'rinku',              '~> 1.7',   require: false
-  gem 'sanitize',           '~> 2.0',   require: false
+  gem 'sanitize',           '~> 4.6', '>= 4.6.5'   require: false
 
   gem 'escape_utils', '~> 1.0', require: false
   gem 'rouge', '~> 3.1', require: false