From 169d53acf7dd5ad1cc1126f766adca9f1ed1fcc7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 6 Jul 2022 02:45:01 +0000 Subject: [PATCH] Bump rails-html-sanitizer from 1.0.4 to 1.4.3 Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.0.4 to 1.4.3. - [Release notes](https://github.com/rails/rails-html-sanitizer/releases) - [Changelog](https://github.com/rails/rails-html-sanitizer/blob/master/CHANGELOG.md) - [Commits](https://github.com/rails/rails-html-sanitizer/compare/v1.0.4...v1.4.3) --- updated-dependencies: - dependency-name: rails-html-sanitizer dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Gemfile | 2 +- Gemfile.lock | 14 ++++++++------ 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/Gemfile b/Gemfile index ccf925216..1c202378d 100644 --- a/Gemfile +++ b/Gemfile @@ -3,7 +3,7 @@ ruby '2.6.6' # transient dependency of rails with security issue, pick secure one gem 'loofah', '>= 2.2.3' -gem 'rails-html-sanitizer', '~> 1.0.4' +gem 'rails-html-sanitizer', '~> 1.4.3' gem 'sprockets', '~> 3.7.2' gem 'rack', '>= 1.6.11' diff --git a/Gemfile.lock b/Gemfile.lock index 9eaba84cf..20b861964 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -215,7 +215,7 @@ GEM mime-types-data (3.2019.1009) mini_magick (4.10.1) mini_mime (1.0.2) - mini_portile2 (2.4.0) + mini_portile2 (2.8.0) minitest (5.14.0) modware (0.1.3) key_struct (~> 0.4) @@ -224,8 +224,9 @@ GEM nenv (0.3.0) newrelic_rpm (6.9.0.363) nio4r (2.5.7) - nokogiri (1.10.9) - mini_portile2 (~> 2.4.0) + nokogiri (1.13.6) + mini_portile2 (~> 2.8.0) + racc (~> 1.4) notiffany (0.1.3) nenv (~> 0.1) shellany (~> 0.0) @@ -251,6 +252,7 @@ GEM public_suffix (4.0.3) puma (4.3.8) nio4r (~> 2.0) + racc (1.6.0) rack (1.6.13) rack-cors (1.0.6) rack (>= 1.6.0) @@ -275,8 +277,8 @@ GEM activesupport (>= 4.2.0, < 5.0) nokogiri (~> 1.6) rails-deprecated_sanitizer (>= 1.0.1) - rails-html-sanitizer (1.0.4) - loofah (~> 2.2, >= 2.2.2) + rails-html-sanitizer (1.4.3) + loofah (~> 2.3) rails_12factor (0.0.3) rails_serve_static_assets rails_stdout_logging @@ -433,7 +435,7 @@ DEPENDENCIES rack (>= 1.6.11) rack-cors rails (< 5) - rails-html-sanitizer (~> 1.0.4) + rails-html-sanitizer (~> 1.4.3) rails_12factor rake redis