Bump ckeditor from 4.2.4 to 4.3.0
This version solves a security issue: https://ckeditor.com/cke4/release/CKEditor-4.11.0 Note this version adds a `ckeditor/samples` folder, which is automatically added to the application's assets manifest even if we remove all CKEditor references in our application. One of the files in that folder makes ExecJS raise a syntax error, causing every page to raise a 500 error.
This commit is contained in:
2
Gemfile
2
Gemfile
@@ -10,7 +10,7 @@ gem "audited", "~> 4.9.0"
|
||||
gem "autoprefixer-rails", "~> 8.2.0"
|
||||
gem "browser", "~> 2.5.3"
|
||||
gem "cancancan", "~> 2.3.0"
|
||||
gem "ckeditor", "~> 4.2.3"
|
||||
gem "ckeditor", "~> 4.3.0"
|
||||
gem "cocoon", "~> 1.2.9"
|
||||
gem "daemons", "~> 1.2.4"
|
||||
gem "dalli", "~> 2.7.6"
|
||||
|
||||
@@ -129,9 +129,9 @@ GEM
|
||||
childprocess (0.9.0)
|
||||
ffi (~> 1.0, >= 1.0.11)
|
||||
chronic (0.10.2)
|
||||
ckeditor (4.2.4)
|
||||
cocaine
|
||||
ckeditor (4.3.0)
|
||||
orm_adapter (~> 0.5.0)
|
||||
terrapin
|
||||
climate_control (0.2.0)
|
||||
cocaine (0.5.8)
|
||||
climate_control (>= 0.0.3, < 1.0)
|
||||
@@ -532,6 +532,8 @@ GEM
|
||||
tins (~> 1.0)
|
||||
terminal-table (1.8.0)
|
||||
unicode-display_width (~> 1.1, >= 1.1.1)
|
||||
terrapin (0.6.0)
|
||||
climate_control (>= 0.0.3, < 1.0)
|
||||
thor (0.19.4)
|
||||
thread_safe (0.3.6)
|
||||
tilt (2.0.8)
|
||||
@@ -595,7 +597,7 @@ DEPENDENCIES
|
||||
capistrano3-puma (~> 4.0.0)
|
||||
capybara (~> 2.17.0)
|
||||
capybara-webmock (~> 0.5.3)
|
||||
ckeditor (~> 4.2.3)
|
||||
ckeditor (~> 4.3.0)
|
||||
cocoon (~> 1.2.9)
|
||||
coveralls (~> 0.8.22)
|
||||
daemons (~> 1.2.4)
|
||||
|
||||
@@ -9,4 +9,5 @@ Ckeditor.setup do |config|
|
||||
|
||||
config.assets_languages = Rails.application.config.i18n.available_locales.map { |l| l.to_s.downcase }
|
||||
config.assets_plugins = %w[copyformatting image link magicline scayt table tableselection wsc]
|
||||
config.assets.reject! { |asset| asset =~ /\Ackeditor\/samples\// }
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user