rails/rails-dom-testing

Possible to relax nokogiri version?

thebenedict opened this issue · 4 comments

thebenedict commented

Hi there,

Would you consider allowing nokogiri 1.7.x? Nokogiri was updated to 1.7 because of CVE-2016-4658.

Thank you,
--Michael

jmgarnier commented

@thebenedict check out the reply I got in #63

kaspth commented

Yup, that's what we have 1.0.8 for: https://github.com/rails/rails-dom-testing/releases/tag/v1.0.8

Try a bundle update rails-dom-testing nokogiri, thanks!

  • 🎉1
thebenedict commented

Thank you both, got it sorted. Cheers.

kaspth commented

Glad to hear it! 💪