Bump ckeditor from 4.2.4 to 4.3.0

This version solves a security issue:

https://ckeditor.com/cke4/release/CKEditor-4.11.0

Note this version adds a `ckeditor/samples` folder, which is
automatically added to the application's assets manifest even if we
remove all CKEditor references in our application. One of the files in
that folder makes ExecJS raise a syntax error, causing every page to
raise a 500 error.
This commit is contained in:
Javi Martín
2019-11-06 22:05:44 +01:00
parent a2f5317ae1
commit f240e0073f
3 changed files with 7 additions and 4 deletions

View File

@@ -10,7 +10,7 @@ gem "audited", "~> 4.9.0"
gem "autoprefixer-rails", "~> 8.2.0" gem "autoprefixer-rails", "~> 8.2.0"
gem "browser", "~> 2.5.3" gem "browser", "~> 2.5.3"
gem "cancancan", "~> 2.3.0" gem "cancancan", "~> 2.3.0"
gem "ckeditor", "~> 4.2.3" gem "ckeditor", "~> 4.3.0"
gem "cocoon", "~> 1.2.9" gem "cocoon", "~> 1.2.9"
gem "daemons", "~> 1.2.4" gem "daemons", "~> 1.2.4"
gem "dalli", "~> 2.7.6" gem "dalli", "~> 2.7.6"

View File

@@ -129,9 +129,9 @@ GEM
childprocess (0.9.0) childprocess (0.9.0)
ffi (~> 1.0, >= 1.0.11) ffi (~> 1.0, >= 1.0.11)
chronic (0.10.2) chronic (0.10.2)
ckeditor (4.2.4) ckeditor (4.3.0)
cocaine
orm_adapter (~> 0.5.0) orm_adapter (~> 0.5.0)
terrapin
climate_control (0.2.0) climate_control (0.2.0)
cocaine (0.5.8) cocaine (0.5.8)
climate_control (>= 0.0.3, < 1.0) climate_control (>= 0.0.3, < 1.0)
@@ -532,6 +532,8 @@ GEM
tins (~> 1.0) tins (~> 1.0)
terminal-table (1.8.0) terminal-table (1.8.0)
unicode-display_width (~> 1.1, >= 1.1.1) unicode-display_width (~> 1.1, >= 1.1.1)
terrapin (0.6.0)
climate_control (>= 0.0.3, < 1.0)
thor (0.19.4) thor (0.19.4)
thread_safe (0.3.6) thread_safe (0.3.6)
tilt (2.0.8) tilt (2.0.8)
@@ -595,7 +597,7 @@ DEPENDENCIES
capistrano3-puma (~> 4.0.0) capistrano3-puma (~> 4.0.0)
capybara (~> 2.17.0) capybara (~> 2.17.0)
capybara-webmock (~> 0.5.3) capybara-webmock (~> 0.5.3)
ckeditor (~> 4.2.3) ckeditor (~> 4.3.0)
cocoon (~> 1.2.9) cocoon (~> 1.2.9)
coveralls (~> 0.8.22) coveralls (~> 0.8.22)
daemons (~> 1.2.4) daemons (~> 1.2.4)

View File

@@ -9,4 +9,5 @@ Ckeditor.setup do |config|
config.assets_languages = Rails.application.config.i18n.available_locales.map { |l| l.to_s.downcase } config.assets_languages = Rails.application.config.i18n.available_locales.map { |l| l.to_s.downcase }
config.assets_plugins = %w[copyformatting image link magicline scayt table tableselection wsc] config.assets_plugins = %w[copyformatting image link magicline scayt table tableselection wsc]
config.assets.reject! { |asset| asset =~ /\Ackeditor\/samples\// }
end end