Skip to content

Commit 351b149

Browse files
author
Andrew Watson
committed
Bumped handlebars-source version to 4.0.5.
Handlebars source has an XSS vulnerability in versions prior to 4.0.0. See: https://gemnasium.com/cowboyd/handlebars.rb/alerts By bumping handlebars-source to the latest version, we should resolve this vulnerability.
1 parent dd7b491 commit 351b149

File tree

3 files changed

+5
-2
lines changed

3 files changed

+5
-2
lines changed

Changelog.md

+3
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
# 0.8.0
2+
* bumped handlebars-source version to 4.0.5
3+
14
# 0.2.3
25

36
* expose precompilation method

handlebars.gemspec

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Gem::Specification.new do |s|
1313
s.files = `git ls-files lib README.mdown`.split("\n")
1414

1515
s.add_dependency "therubyracer", "~> 0.12.1"
16-
s.add_dependency "handlebars-source", "~> 3.0.0"
16+
s.add_dependency "handlebars-source", "~> 4.0.5"
1717
s.add_development_dependency "rake"
1818
s.add_development_dependency "rspec", "~> 2.0"
1919
end

lib/handlebars/version.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
module Handlebars
2-
VERSION = "0.7.0"
2+
VERSION = "0.8.0"
33
end

0 commit comments

Comments
 (0)