Merge pull request #10281 from TeamNewPipe/okio

Update com.squareup.okio:okio to 3.4.0
TeamNewPipe · Jul 31, 2023 · 6b3f51e · 6b3f51e
2 parents 96a7cc2 + 428a7d4
commit 6b3f51e
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/build.gradle b/app/build.gradle
@@ -244,6 +244,9 @@ dependencies {
 
     // HTTP client
     implementation "com.squareup.okhttp3:okhttp:4.11.0"
+    // okhttp3:4.11.0 introduces a vulnerability from com.squareup.okio:[email protected],
+    // remove com.squareup.okio:okio when updating okhttp
+    implementation "com.squareup.okio:okio:3.4.0"
 
     // Media player
     implementation "com.google.android.exoplayer:exoplayer-core:${exoPlayerVersion}"