From fd0bb3400161098a94149d4ac4d2def319c597c1 Mon Sep 17 00:00:00 2001 From: Sam Saffron Date: Tue, 1 Oct 2019 16:55:58 +1000 Subject: [PATCH] SECURITY: update rack-mini-profiler to latest to correct XSS This corrects an XSS in ?pp=help. Also removes the jQuery dependency from rack-mini-profiler and restricts memory sensitive profiling methods development only. --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index dc564b17a7..5f2120753d 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -267,7 +267,7 @@ GEM puma (3.12.1) r2 (0.2.7) rack (2.0.7) - rack-mini-profiler (1.0.2) + rack-mini-profiler (1.1.0) rack (>= 1.2.0) rack-openid (1.3.1) rack (>= 1.1.0)