Fixes CVE-2018-16468 vulnerability

More details can be found here: flavorjones/loofah#154
ministryofjustice · Nov 2, 2018 · 663a00a · 663a00a
1 parent 92d1016
commit 663a00a
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/Gemfile b/Gemfile
@@ -6,6 +6,7 @@ ruby '2.5.1'
 gem 'active_model_serializers', '~> 0.10.7'
 gem 'govuk_notify_rails', '~> 2.0.0'
 gem 'jquery-rails', '~> 4.3', '>= 4.3.3'
+gem 'loofah', '>= 2.2.3'
 gem 'pg'
 gem 'puma', '~> 3.11'
 gem 'rails', '~> 5.2.0'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -142,7 +142,7 @@ GEM
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
       ruby_dep (~> 1.2)
-    loofah (2.2.2)
+    loofah (2.2.3)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.0)
@@ -321,6 +321,7 @@ DEPENDENCIES
   jquery-rails (~> 4.3, >= 4.3.3)
   json_expressions
   listen (>= 3.0.5, < 3.2)
+  loofah (>= 2.2.3)
   pg
   poltergeist
   pry-byebug