psu-libraries / scholarsphere-3

A web application for ingest, curation, search, and display of digital assets. Powered by Hydra technologies (Rails, Hydra-head, Blacklight, Solr, Fedora Commons, etc.)
Apache License 2.0
78 stars 24 forks source link

Updating loofah and rack to address security issues #1633

Closed awead closed 4 years ago

awead commented 4 years ago

Rack: GHSA-hrqr-hxpp-chr3 Loofah: CVE-2019-15587

Supersedes: #1632 and #1631

coveralls commented 4 years ago

Coverage Status

Coverage remained the same at 55.997% when pulling f7d5089a51d73499f434337e022d273984d1b230 on sec-updates into 770d75f6544b4ba8a4f49c13faa2685ffbe9965f on develop.