CVE-2019-8331

forestofthings · Feb 25, 2019 · 6adbfd4 · 6adbfd4
1 parent 61e40a7
commit 6adbfd4
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 4 deletions.
diff --git a/Gemfile b/Gemfile
@@ -14,7 +14,7 @@ platform :jruby do
     gem "rake"
     gem "warbler", "~> 2.0.4"
     gem "jruby-jars", "9.2.0.0"
-    gem "bootstrap-sass", "~> 3.2.0"
+    gem "bootstrap-sass", ">= 3.4.1"
     gem "compass"
   end
 end
diff --git a/Gemfile.lock b/Gemfile.lock
@@ -1,12 +1,15 @@
 GEM
   remote: https://rubygems.org/
   specs:
+    autoprefixer-rails (9.4.9)
+      execjs
     axiom-types (0.1.1)
       descendants_tracker (~> 0.0.4)
       ice_nine (~> 0.11.0)
       thread_safe (~> 0.3, >= 0.3.1)
-    bootstrap-sass (3.2.0.2)
-      sass (~> 3.2)
+    bootstrap-sass (3.4.1)
+      autoprefixer-rails (>= 5.2.1)
+      sassc (>= 2.0.0)
     chunky_png (1.3.11)
     coercible (1.0.0)
       descendants_tracker (~> 0.0.1)
@@ -27,6 +30,7 @@ GEM
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
     equalizer (0.0.11)
+    execjs (2.7.0)
     ffi (1.9.25-java)
     ice_nine (0.11.2)
     jar-dependencies (0.3.12)
@@ -50,6 +54,9 @@ GEM
     ruby-maven-libs (3.3.9)
     rubyzip (1.2.2)
     sass (3.4.25)
+    sassc (2.0.0)
+      ffi (~> 1.9.6)
+      rake
     thread_safe (0.3.6-java)
     tilt (2.0.8)
     virtus (1.0.5)
@@ -67,7 +74,7 @@ PLATFORMS
   java
 
 DEPENDENCIES
-  bootstrap-sass (~> 3.2.0)
+  bootstrap-sass (>= 3.4.1)
   compass
   cuba (~> 3.9.2)
   jar-dependencies (= 0.3.12)