Add change forgotten in previous commit

mherrmann · Nov 15, 2023 · ad19a15 · ad19a15
1 parent d2383ea
commit ad19a15
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/setup.py b/setup.py
@@ -14,7 +14,10 @@
 	install_requires = [
 		# Also update requirements/base.txt when you make changes here.
 		'selenium>=4.9.0,<4.10',
-		'webdriver_manager'
+		# Freeze webdriver-manager for security; It downloads and runs binaries
+		# from the internet. If it becomes malicious in the future, very bad
+		# things can happen.
+		'webdriver-manager==4.0.1'
 	],
 	package_data = {
 		'helium._impl': ['webdrivers/**/*']