Skip to content

Commit 30b0a84

Browse files
authored
fix(deps): upgrade webrick dep (#1441)
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. NOTE: the supplier's position is "Webrick should not be used in production."
1 parent 0d6f07b commit 30b0a84

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/Gemfile.lock

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -265,7 +265,7 @@ GEM
265265
unf_ext (0.0.9.1)
266266
unicode-display_width (1.8.0)
267267
uri (0.13.0)
268-
webrick (1.8.1)
268+
webrick (1.8.2)
269269

270270
PLATFORMS
271271
ruby

0 commit comments

Comments
 (0)