From 514a45b0c1727f56744ff22c2084c921e2479434 Mon Sep 17 00:00:00 2001 From: Robin Ward Date: Wed, 21 Jan 2015 13:57:03 -0500 Subject: [PATCH] SECURITY: Don't whitelist codepen as it is a potential vector for abuse --- Gemfile.lock | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Gemfile.lock b/Gemfile.lock index 84322f949b2..d9a7d662df3 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -271,7 +271,7 @@ GEM omniauth-twitter (1.0.1) multi_json (~> 1.3) omniauth-oauth (~> 1.0) - onebox (1.5.6) + onebox (1.5.7) moneta (~> 0.7) multi_json (~> 1.7) mustache (~> 0.99)