Increase minimum Sanitize version requirement to 1.1.0.

1.0.x versions of Sanitize require Hpricot instead of Nokogiri
and have bugs that may allow non-whitelisted HTML to sneak
through.
This commit is contained in:
Ryan Grove
2010-08-12 14:17:33 -07:00
parent 541b58af8f
commit f159c54dc8
+1 -1
View File
@@ -28,7 +28,7 @@ Gem::Specification.new do |s|
s.add_dependency('albino', "~> 1.0")
s.add_dependency('sinatra', "~> 1.0")
s.add_dependency('mustache', [">= 0.11.2", "< 1.0.0"])
s.add_dependency('sanitize', "~> 1.0")
s.add_dependency('sanitize', "~> 1.1")
s.add_dependency('nokogiri', "~> 1.4")
s.add_development_dependency('shoulda')