Increase minimum Sanitize version requirement to 1.1.0.
1.0.x versions of Sanitize require Hpricot instead of Nokogiri and have bugs that may allow non-whitelisted HTML to sneak through.
This commit is contained in:
+1
-1
@@ -28,7 +28,7 @@ Gem::Specification.new do |s|
|
||||
s.add_dependency('albino', "~> 1.0")
|
||||
s.add_dependency('sinatra', "~> 1.0")
|
||||
s.add_dependency('mustache', [">= 0.11.2", "< 1.0.0"])
|
||||
s.add_dependency('sanitize', "~> 1.0")
|
||||
s.add_dependency('sanitize', "~> 1.1")
|
||||
s.add_dependency('nokogiri', "~> 1.4")
|
||||
|
||||
s.add_development_dependency('shoulda')
|
||||
|
||||
Reference in New Issue
Block a user