From: Go MAEDA <maeda@farend.jp>
Date: Fri, 18 Dec 2020 00:40:41 +0000 (+0000)
Subject: Update Redcarpet to 3.5.1 (#34461).
X-Git-Tag: 4.2.0~154
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=0370be3ed1a42b831cb86507f85f6245bb1f8ead;p=redmine.git

Update Redcarpet to 3.5.1 (#34461).

The version fixes a security vulnerability using :quote in combination with the :escape_html option.


git-svn-id: http://svn.redmine.org/redmine/trunk@20665 e93f8b46-1217-0410-a6f0-8f06a7374b81
---

diff --git a/Gemfile b/Gemfile
index e03e663cb..5eb62c1e9 100644
--- a/Gemfile
+++ b/Gemfile
@@ -44,7 +44,7 @@ end
 
 # Optional Markdown support, not for JRuby
 group :markdown do
-  gem "redcarpet", "~> 3.5.0"
+  gem 'redcarpet', '~> 3.5.1'
 end
 
 # Include database gems for the adapters found in the database