Skip to content

chore: bump loofah and rails-html-sanitizer for security fixes - #195

Merged
ineedjet merged 1 commit into
mainfrom
chore/bump-loofah-security
Sep 2, 2026
Merged

chore: bump loofah and rails-html-sanitizer for security fixes#195
ineedjet merged 1 commit into
mainfrom
chore/bump-loofah-security

Conversation

@ineedjet

@ineedjet ineedjet commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Summary

Test plan

  • bundle check
  • python3 -m pytest test/

loofah 2.25.1 -> 2.25.2 and rails-html-sanitizer 1.7.0 -> 1.7.1 fix XSS
sanitizer bypasses flagged by Dependabot alerts #9, #10, #11, #12. Also
bumps bundler to 4.0.11.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@ineedjet
ineedjet merged commit ef36440 into main Sep 2, 2026
6 checks passed
@ineedjet
ineedjet deleted the chore/bump-loofah-security branch September 2, 2026 10:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant