diff options
| author | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2015-10-15 08:21:18 +0000 |
|---|---|---|
| committer | Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com> | 2015-10-15 08:21:18 +0000 |
| commit | fb7785628a04f9facb0d05867cb5c4cafb646561 (patch) | |
| tree | 9198986215365465771f135fc6288ca4470f1d6e /Gemfile | |
| parent | e2045f5e68b7dfb058f332a07d56ad285ceb6f77 (diff) | |
| parent | 0fbb544c502a30c751a4a8c8f954f853aece93b2 (diff) | |
| download | gitlab-ce-fb7785628a04f9facb0d05867cb5c4cafb646561.tar.gz | |
Merge branch 'rs-update-uglifier' into 'master'
Update uglifier to ~> 2.7.2
Fixes a security vulnerability:
- https://github.com/lautis/uglifier/pull/86
- https://github.com/mishoo/UglifyJS2/issues/751
- https://zyan.scripts.mit.edu/blog/backdooring-js/
See merge request !1590
Diffstat (limited to 'Gemfile')
| -rw-r--r-- | Gemfile | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -196,7 +196,7 @@ gem 'charlock_holmes', '~> 0.6.9.4' gem "sass-rails", '~> 4.0.5' gem "coffee-rails", '~> 4.1.0' -gem "uglifier", '~> 2.3.2' +gem "uglifier", '~> 2.7.2' gem 'turbolinks', '~> 2.5.0' gem 'jquery-turbolinks', '~> 2.0.1' |