security updates Gems

app/Gemfile

@@ -20,6 +20,8 @@ gem 'delayed_job_active_record'
 gem 'devise', ">= 4.7.1"
 gem 'devise-async'
 
+gem 'loofah', ">= 2.3.1"
+
 # Use SCSS for stylesheets
 gem 'sass-rails', '~> 4.0.0'
 
@@ -36,7 +38,7 @@ gem 'coffee-rails', '~> 4.0.0'
 gem 'jquery-rails', ">= 3.1.3"
 gem 'foundation-rails'
 gem 'foundation-icons-sass-rails'
-gem 'haml-rails'
+gem 'haml-rails', "~> 1.0"
 
 
 # Turbolinks makes following links in your web application faster. Read more: https://github.com/rails/turbolinks

app/Gemfile.lock

@@ -79,7 +79,7 @@ GEM
       execjs
     coffee-script-source (1.7.0)
     concurrent-ruby (1.1.5)
-    crass (1.0.4)
+    crass (1.0.5)
     daemons (1.1.9)
     delayed_job (4.1.8)
       activesupport (>= 3.0, < 6.1)
@@ -115,14 +115,21 @@ GEM
       sass (>= 3.2.0)
     globalid (0.4.2)
       activesupport (>= 4.2.0)
-    haml (4.0.5)
+    haml (5.1.2)
+      temple (>= 0.8.0)
       tilt
-    haml-rails (0.5.3)
+    haml-rails (1.0.0)
       actionpack (>= 4.0.1)
       activesupport (>= 4.0.1)
-      haml (>= 3.1, < 5.0)
+      haml (>= 4.0.6, < 6.0)
+      html2haml (>= 1.0.1)
       railties (>= 4.0.1)
     hike (1.2.3)
+    html2haml (2.2.0)
+      erubis (~> 2.7.0)
+      haml (>= 4.0, < 6)
+      nokogiri (>= 1.6.0)
+      ruby_parser (~> 3.5)
     i18n (0.9.5)
       concurrent-ruby (~> 1.0)
     jbuilder (1.5.3)
@@ -133,7 +140,7 @@ GEM
       railties (>= 4.2.0)
       thor (>= 0.14, < 2.0)
     json (1.8.6)
-    loofah (2.2.3)
+    loofah (2.3.1)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -148,7 +155,7 @@ GEM
     net-scp (1.2.1)
       net-ssh (>= 2.6.5)
     net-ssh (5.2.0)
-    nokogiri (1.10.4)
+    nokogiri (1.10.5)
       mini_portile2 (~> 2.4.0)
     nokogumbo (2.0.1)
       nokogiri (~> 1.8, >= 1.8.4)
@@ -211,6 +218,8 @@ GEM
       rspec-core (~> 2.14.0)
       rspec-expectations (~> 2.14.0)
       rspec-mocks (~> 2.14.0)
+    ruby_parser (3.14.1)
+      sexp_processor (~> 4.9)
     sanitize (5.1.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.8.0)
@@ -224,6 +233,7 @@ GEM
     sdoc (0.4.0)
       json (~> 1.8)
       rdoc (~> 4.0, < 5.0)
+    sexp_processor (4.13.0)
     simplecov (0.7.1)
       multi_json (~> 1.0)
       simplecov-html (~> 0.7.1)
@@ -241,6 +251,7 @@ GEM
       net-scp (>= 1.1.2)
       net-ssh (>= 2.8.0)
       term-ansicolor
+    temple (0.8.2)
     term-ansicolor (1.3.0)
       tins (~> 1.0)
     thor (0.20.3)
@@ -278,10 +289,11 @@ DEPENDENCIES
   factory_girl_rails
   foundation-icons-sass-rails
   foundation-rails
-  haml-rails
+  haml-rails (~> 1.0)
   haml_coffee_assets!
   jbuilder (~> 1.2)
   jquery-rails (>= 3.1.3)
+  loofah (>= 2.3.1)
   net-ssh (>= 3.2)
   passenger (>= 5.1.0)
   pg (= 0.17.1)