Update loofah (CVE-2019-15587)

Author: Vidas P

CHANGELOG.md

@@ -6,6 +6,8 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [current]
+### Fixed
+- Update loofah (CVE-2019-15587)
 
 ## [0.9.5] - 2019-10-16
 ### Added

Gemfile

@@ -65,7 +65,7 @@ gem 'jsonpath', '~> 1.0.1'
 gem 'kaminari', '~> 1.1.1'
 gem 'kramdown', '~> 2.1.0'
 gem 'liquid', '~> 4.0.3'
-gem 'loofah', '~> 2.2.2'
+gem 'loofah', '~> 2.3.1'
 gem 'mini_magick', '~> 4.9.5'
 gem 'nokogiri', '~> 1.10.4'
 gem 'omniauth', '~> 1.9.0'

Gemfile.lock

@@ -125,7 +125,7 @@ GEM
     concurrent-ruby (1.1.5)
     crack (0.4.3)
       safe_yaml (~> 1.0.0)
-    crass (1.0.4)
+    crass (1.0.5)
     daemons (1.2.6)
     debug_inspector (0.0.3)
     delayed_job (4.1.8)
@@ -283,7 +283,7 @@ GEM
     listen (3.0.8)
       rb-fsevent (~> 0.9, >= 0.9.4)
       rb-inotify (~> 0.9, >= 0.9.7)
-    loofah (2.2.3)
+    loofah (2.3.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     lumberjack (1.0.12)
@@ -313,7 +313,7 @@ GEM
     net-ftp-list (3.2.8)
     netrc (0.11.0)
     nio4r (2.3.1)
-    nokogiri (1.10.4)
+    nokogiri (1.10.5)
       mini_portile2 (~> 2.4.0)
     notiffany (0.1.1)
       nenv (~> 0.1)
@@ -626,7 +626,7 @@ DEPENDENCIES
   kramdown (~> 2.1.0)
   letter_opener_web (~> 1.3.1)
   liquid (~> 4.0.3)
-  loofah (~> 2.2.2)
+  loofah (~> 2.3.1)
   mini_magick (~> 4.9.5)
   mini_racer (~> 0.2.6)
   net-ftp-list (~> 3.2.8)