From 6f0bdebed47d37236c16c34b85440c360c98c432 Mon Sep 17 00:00:00 2001
From: Aditya Prakash <aditya.prakash132@gmail.com>
Date: Fri, 1 Apr 2016 09:04:44 +0530
Subject: [PATCH] Update uglifier to 3.0.0

The upstream library for the Ruby uglifier gem, UglifyJS, is
affected by a vulnerability that allows a specially crafted
Javascript file to have altered functionality after minification.
See on Hakiri: https://hakiri.io/github/openSUSE/osem/master/e0ec57b0dcf080bdb9e9b254f2362c52c7657b07/warnings?name=Code+Injection

Uglifier 3 dropped support of ruby 1.8
---
 Gemfile.lock | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/Gemfile.lock b/Gemfile.lock
index 38114ed1..b2a90fa7 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -467,9 +467,8 @@ GEM
       coffee-rails
     tzinfo (1.2.2)
       thread_safe (~> 0.1)
-    uglifier (2.5.0)
-      execjs (>= 0.3.0)
-      json (>= 1.8.0)
+    uglifier (3.0.0)
+      execjs (>= 0.3.0, < 3)
     unicode-display_width (0.3.1)
     unicode_utils (1.4.0)
     unobtrusive_flash (3.1.0)