osr-plastic/osr-discourse-src
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

SECURITY: update rack-mini-profiler to latest to correct XSS

Browse Source 
This corrects an XSS in ?pp=help.

Also removes the jQuery dependency from rack-mini-profiler and restricts
memory sensitive profiling methods development only.
This commit is contained in:
Sam Saffron 2019-10-01 16:55:58 +10:00
parent 382f6959fc
commit f9bdbef16f
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Gemfile.lock
View File

@ -270,7 +270,7 @@ GEM
puma (3.12.1)
r2 (0.2.7)
rack (2.0.7)
rack-mini-profiler (1.0.2)
rack-mini-profiler (1.1.0)
rack (>= 1.2.0)
rack-openid (1.3.1)
rack (>= 1.1.0)