New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2018-16468] Update loofah gem #175

Merged

chrishunt merged 1 commit into master from chrishunt/update-loofah

Oct 30, 2018

Member

chrishunt commented Oct 30, 2018

cc @r00k @ehmorris for review

Fixes CVE-2018-16468: flavorjones/loofah#154

In the Loofah gem, through v2.2.2, unsanitized JavaScript may occur in sanitized output when a crafted SVG element is republished.


          Update loofah gem

8aa544f

Fixes CVE-2018-16468:

flavorjones/loofah#154

chrishunt requested review from ehmorris and r00k

October 30, 2018 17:58

ehmorris approved these changes

View reviewed changes

Member

ehmorris left a comment

I don't really have a good way to test this but I will cowboy approve anyways

chrishunt merged commit d6e2253 into master

chrishunt deleted the chrishunt/update-loofah branch

October 30, 2018 18:11

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment