]> source.dussan.org Git - redmine.git/commitdiff
Update Redcarpet to 3.5.1 (#34461).
authorGo MAEDA <maeda@farend.jp>
Fri, 18 Dec 2020 00:40:41 +0000 (00:40 +0000)
committerGo MAEDA <maeda@farend.jp>
Fri, 18 Dec 2020 00:40:41 +0000 (00:40 +0000)
The version fixes a security vulnerability using :quote in combination with the :escape_html option.

git-svn-id: http://svn.redmine.org/redmine/trunk@20665 e93f8b46-1217-0410-a6f0-8f06a7374b81

Gemfile

diff --git a/Gemfile b/Gemfile
index e03e663cbf0cb8771624973997982cfd958b3026..5eb62c1e9a1cef5a7aab7c2c0d30e7c4d22c807d 100644 (file)
--- a/Gemfile
+++ b/Gemfile
@@ -44,7 +44,7 @@ end
 
 # Optional Markdown support, not for JRuby
 group :markdown do
-  gem "redcarpet", "~> 3.5.0"
+  gem 'redcarpet', '~> 3.5.1'
 end
 
 # Include database gems for the adapters found in the database