Project

General

Profile

Actions
Copy link

Patch #34619

closed

Update Nokogiri to 1.11

Added by Go MAEDA about 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Go MAEDA
Category:
Gems support
Target version:
4.1.2
Start date:
Due date:
% Done:

0%

Estimated time:

Description

A security issue CVE-2020-26247 has been fixed in Nokogiri 1.11.0.
https://nokogiri.org/CHANGELOG.html#v1110-2021-01-03

diff --git a/Gemfile b/Gemfile
index 88c71c4a7..a254636aa 100644
--- a/Gemfile
+++ b/Gemfile
@@ -13,7 +13,7 @@ gem 'roadie-rails', (RUBY_VERSION < '2.5' ? '~> 1.3.0' : '~> 2.2.0')
 gem "mimemagic" 
 gem "mail", "~> 2.7.1" 
 gem 'csv', (RUBY_VERSION < '2.5' ? ['>= 3.1.1', '<= 3.1.5'] : '~> 3.1.1')
-gem "nokogiri", "~> 1.10.0" 
+gem 'nokogiri', (RUBY_VERSION < '2.5' ? '~> 1.10.0' : '~> 1.11.1')
 gem 'i18n', '~> 1.8.2'
 gem "rbpdf", "~> 1.20.0" 
 gem 'addressable'
Actions
Copy link

Also available in: Atom PDF