From 0370be3ed1a42b831cb86507f85f6245bb1f8ead Mon Sep 17 00:00:00 2001 From: Go MAEDA Date: Fri, 18 Dec 2020 00:40:41 +0000 Subject: [PATCH] Update Redcarpet to 3.5.1 (#34461). The version fixes a security vulnerability using :quote in combination with the :escape_html option. git-svn-id: http://svn.redmine.org/redmine/trunk@20665 e93f8b46-1217-0410-a6f0-8f06a7374b81 --- Gemfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile b/Gemfile index e03e663cb..5eb62c1e9 100644 --- a/Gemfile +++ b/Gemfile @@ -44,7 +44,7 @@ end # Optional Markdown support, not for JRuby group :markdown do - gem "redcarpet", "~> 3.5.0" + gem 'redcarpet', '~> 3.5.1' end # Include database gems for the adapters found in the database -- 2.39.5