project: fix security issue in bleach library

.gitignore

@@ -48,9 +48,6 @@ coverage.xml
 *,cover
 .pytest_cache
 
-# end-to-end testing
-.e2e_screenshots
-
 # Translations
 *.mo
 

.travis.yml

@@ -40,16 +40,6 @@ cache:
 services:
   - docker
 
-env:
-  global:
-    # Print screenshots to console output
-    - E2E_OUTPUT=base64
-    # Enable end-to-end tests
-    - E2E=no
-  matrix:
-    - REQUIREMENTS=prod E2E=yes
-    - REQUIREMENTS=qa
-
 python:
   - "3.6"
 
@@ -63,7 +53,6 @@ before_install:
   - "docker-compose up -d"
   # Chrome webdriver for Selenium
   - "PATH=$PATH:$HOME/webdrivers"
-  - "if [ ${E2E} == 'yes' ] && [ ! -f $HOME/webdrivers/chromedriver ]; then wget https://chromedriver.storage.googleapis.com/2.31/chromedriver_linux64.zip -P $HOME/webdrivers; unzip -d $HOME/webdrivers $HOME/webdrivers/chromedriver_linux64.zip; fi"
   - "nvm install 8; nvm use 8"
   - "travis_retry pip install --upgrade pip setuptools py pipenv"
   - "travis_retry pip install twine wheel coveralls"
@@ -74,12 +63,11 @@ install:
 before_script:
   # https://docs.travis-ci.com/user/gui-and-headless-browsers/
   - "export DISPLAY=:99.0"
-  - "if [ ${E2E} == 'yes' ]; then sh -e /etc/init.d/xvfb start; sleep 3; fi"
   # Allow services running inside docker to start
   - "./docker/wait-for-services.sh"
 
 script:
-  - ./run-tests.sh # E2E tests are skipped if E2E env is set to 'no'
+  - ./run-tests.sh
 
 after_success:
   - coveralls

Pipfile

@@ -25,7 +25,7 @@ werkzeug = "==0.16.0"
 flask-login = "<0.5"
 invenio-oaiharvester = {editable = true,ref = "v1.0.0a4",git = "https://github.com/inveniosoftware/invenio-oaiharvester.git"}
 # Forced version for security reason
-bleach = ">=3.1.1"
+bleach = ">=3.1.3"
 
 [dev-packages]
 Flask-Debugtoolbar = ">=0.10.1"