CVE-2019-5477 - Explicitly use nokogiri >= 1.10.4 (#679)

* Explicitly use nokogiri >= 1.10.4 * Cover all version Signed-off-by: Tom Kerkhove <kerkhove.tom@gmail.com>
tomkerkhove · Aug 20, 2019 · f307e01 · f307e01
1 parent d27a028
commit f307e01
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/docs/Gemfile b/docs/Gemfile
@@ -1,2 +1,3 @@
 source 'https://rubygems.org'
-gem 'github-pages', '>= 192', group: :jekyll_plugins
+gem 'github-pages', '>= 192', group: :jekyll_plugins
+gem "nokogiri", '>= 1.10.4'
diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock
@@ -74,7 +74,7 @@ GEM
       listen (= 3.1.5)
       mercenary (~> 0.3)
       minima (= 2.5.0)
-      nokogiri (>= 1.8.5, < 2.0)
+      nokogiri (>= 1.10.4, < 2.0)
       rouge (= 2.2.1)
       terminal-table (~> 1.4)
     github-pages-health-check (1.16.1)
@@ -85,7 +85,7 @@ GEM
       typhoeus (~> 1.3)
     html-pipeline (2.12.0)
       activesupport (>= 2)
-      nokogiri (>= 1.4)
+      nokogiri (>= 1.10.4)
     http_parser.rb (0.6.0)
     i18n (0.9.5)
       concurrent-ruby (~> 1.0)
@@ -248,6 +248,7 @@ PLATFORMS
 
 DEPENDENCIES
   github-pages (>= 192)
+  nokogiri (>= 1.10.4)
 
 BUNDLED WITH
    1.17.3