security fix: update nokogiri to 1.8.3

1.8.2 has an XSS vuln, see: sparklemotion/nokogiri#1746
dradis · Jul 6, 2018 · fe9ec07 · fe9ec07
1 parent 2b9f700
commit fe9ec07
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/Gemfile b/Gemfile
@@ -85,7 +85,7 @@ gem 'json', '1.8.6'
 # TODO: Traveling Ruby - DANGER, DANGER: this version has an issue, but it's
 # the last one supported by Traveling Ruby
 # gem 'nokogiri', '1.6.6.2'
-gem 'nokogiri', '1.8.2'
+gem 'nokogiri', '1.8.3'
 
 # MySQL backend
 gem 'mysql2', '~> 0.5.1'

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -191,7 +191,7 @@ GEM
     mysql2 (0.5.1)
     nenv (0.3.0)
     nio4r (2.3.1)
-    nokogiri (1.8.2)
+    nokogiri (1.8.3)
       mini_portile2 (~> 2.3.0)
     notiffany (0.1.1)
       nenv (~> 0.1)
@@ -409,7 +409,7 @@ DEPENDENCIES
   listen (>= 3.0.5, < 3.2)
   local_time (>= 2.0.0)
   mysql2 (~> 0.5.1)
-  nokogiri (= 1.8.2)
+  nokogiri (= 1.8.3)
   paper_trail (~> 6.0)
   parslet (~> 1.6.0)
   poltergeist