Bump rails-html-sanitizer from 1.0.2 to 1.4.4

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.0.2 to 1.4.4.
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/master/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.0.2...v1.4.4)

---
updated-dependencies:
- dependency-name: rails-html-sanitizer
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

Gemfile.lock

@@ -64,6 +64,7 @@ GEM
       xpath (~> 2.0)
     coderay (1.1.0)
     connection_pool (2.2.5)
+    crass (1.0.6)
     erubis (2.7.0)
     ethon (0.15.0)
       ffi (>= 1.15.0)
@@ -85,14 +86,15 @@ GEM
     json (1.8.6)
     launchy (2.4.3)
       addressable (~> 2.3)
-    loofah (2.0.2)
+    loofah (2.19.1)
+      crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.6.3)
       mime-types (>= 1.16, < 3)
     metaclass (0.0.4)
     method_source (0.8.2)
     mime-types (2.6.1)
-    mini_portile (0.6.2)
+    mini_portile2 (2.1.0)
     minitest (5.7.0)
     minitest-spec-rails (5.2.2)
       minitest (~> 5.0)
@@ -102,8 +104,8 @@ GEM
     multipart-post (2.1.1)
     net-http-persistent (4.0.1)
       connection_pool (~> 2.2)
-    nokogiri (1.6.6.2)
-      mini_portile (~> 0.6.0)
+    nokogiri (1.6.8.1)
+      mini_portile2 (~> 2.1.0)
     power_assert (0.2.3)
     pry (0.10.1)
       coderay (~> 1.1.0)
@@ -129,8 +131,8 @@ GEM
       activesupport (>= 4.2.0.beta, < 5.0)
       nokogiri (~> 1.6.0)
       rails-deprecated_sanitizer (>= 1.0.1)
-    rails-html-sanitizer (1.0.2)
-      loofah (~> 2.0)
+    rails-html-sanitizer (1.4.4)
+      loofah (~> 2.19, >= 2.19.1)
     railties (4.2.2)
       actionpack (= 4.2.2)
       activesupport (= 4.2.2)