update redcarpet due to XSS bug

http://danlec.com/blog/bug-in-sundown-and-redcarpet

2 files changed, 3 insertions, 3 deletions

diff --git a/Gemfile b/Gemfile
index 4bbee9e..7d6f0ff 100644
--- a/Gemfile
+++ b/Gemfile
@@ -6,7 +6,7 @@ gem 'mysql2'
 gem 'jquery-rails'
 gem 'bcrypt-ruby' # To use ActiveModel's has_secure_password
 gem 'sanitize'
-gem 'redcarpet'
+gem 'redcarpet', '~> 3.2.3'
 gem 'hirb' # pretty console output
 gem 'rb-readline'
 gem 'rest-client'
diff --git a/Gemfile.lock b/Gemfile.lock
index 44289d5..b308c0c 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -140,7 +140,7 @@ GEM
     raindrops (0.13.0)
     rake (10.2.2)
     rb-readline (0.5.1)
-    redcarpet (3.1.1)
+    redcarpet (3.2.3)
     rest-client (1.6.7)
       mime-types (>= 1.16)
     ruby-graphviz (1.0.9)
@@ -203,7 +203,7 @@ DEPENDENCIES
   rails (= 4.1.0)
   rails-erd
   rb-readline
-  redcarpet
+  redcarpet (~> 3.2.3)
   rest-client
   sanitize
   sass-rails