Vote #79691
完了Remove rails-html-sanitizer from Gemfile
開始日:
2022/05/09
期日:
進捗率:
0%
予定工数:
Redmineorg_URL:
category_id:
30
version_id:
99
issue_org_id:
30137
author_id:
332
assigned_to_id:
332
comments:
3
status_id:
5
tracker_id:
3
plus1:
0
affected_version:
closed_on:
affected_version_id:
説明
Redmine installs rails-html-sanitizer to ensure that not to use vulnerable versions prior to 1.0.3.
But it is not necessary any longer because Rails "actionview 5.2.2":https://rubygems.org/gems/actionview/versions/5.2.2 requires rails-html-sanitizer 1.0.3 or later.
Index: Gemfile
===================================================================
--- Gemfile (revision 17706)
+++ Gemfile (working copy)
@@ -17,9 +17,6 @@
gem "nokogiri", "~> 1.8.0"
gem "i18n", "~> 0.7.0"
-# Request at least rails-html-sanitizer 1.0.3 because of security advisories
-gem "rails-html-sanitizer", ">= 1.0.3"
-
# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
gem 'tzinfo-data', platforms: [:mingw, :x64_mingw, :mswin]
gem "rbpdf", "~> 1.19.6"
journals
It was introduced in r15105.
--------------------------------------------------------------------------------
Committed.
--------------------------------------------------------------------------------
--------------------------------------------------------------------------------
Admin Redmine さんが約4年前に更新
- カテゴリ を Code cleanup/refactoring_30 にセット
- 対象バージョン を 4.0.0_99 にセット
いいね!0