From 6ba2b1dcd0bc5b572dee6e4237c4f0ad617b0693 Mon Sep 17 00:00:00 2001 From: Alfredo Amatriain Date: Sat, 29 Aug 2015 13:12:42 +0200 Subject: [PATCH] Updated uglifier gem 2.7.1 -> 2.7.2 This fixes a security vulnerability. Details: https://github.com/lautis/uglifier/pull/86 https://zyan.scripts.mit.edu/blog/backdooring-js/ https://nodesecurity.io/advisories/uglifyjs_incorrectly_handles_non-boolean_comparisons https://github.com/mishoo/UglifyJS2/issues/751 --- Gemfile.lock | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index aad37cd99..12da51e19 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -153,7 +153,7 @@ GEM unf (>= 0.0.5, < 1.0.0) erubis (2.7.0) eventmachine (1.0.7) - execjs (2.5.0) + execjs (2.6.0) factory_girl (4.5.0) activesupport (>= 3.0.0) factory_girl_rails (4.5.0) @@ -412,7 +412,7 @@ GEM tins (1.5.4) tzinfo (1.2.2) thread_safe (~> 0.1) - uglifier (2.7.1) + uglifier (2.7.2) execjs (>= 0.3.0) json (>= 1.8.0) unf (0.1.4)