Require a version of nokogiri with known vulnerabilities resolved

re: https://hakiri.io/github/openSUSE/osem/master/78eb58c93eb766505dd12319d0502c10b40a811f/warnings/b532fbd10b687d
This commit is contained in:
James Mason 2017-10-10 10:34:16 -07:00 committed by Stella Rouzi
parent 1ac751fc7b
commit f2b5c2627c
2 changed files with 10 additions and 4 deletions

View file

@ -200,6 +200,11 @@ gem 'sprockets-rails'
# for multiple speakers select on proposal/event forms
gem 'selectize-rails'
# Nokogiri < 1.8.1 is subject to:
# CVE-2017-0663, CVE-2017-7375, CVE-2017-7376, CVE-2017-9047, CVE-2017-9048,
# CVE-2017-9049, CVE-2017-9050
gem 'nokogiri', '>= 1.8.1'
# Use guard and spring for testing in development
group :development do
# to launch specs when files are modified