Bump rails-html-sanitizer from 1.0.3 to 1.3.0

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.0.3 to 1.3.0.
- [Release notes](https://github.com/rails/rails-html-sanitizer/releases)
- [Changelog](https://github.com/rails/rails-html-sanitizer/blob/master/CHANGELOG.md)
- [Commits](rails/rails-html-sanitizer@v1.0.3...v1.3.0)

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

Gemfile.lock

@@ -43,6 +43,7 @@ GEM
     arel (7.1.4)
     builder (3.2.2)
     concurrent-ruby (1.1.5)
+    crass (1.0.5)
     descendants_tracker (0.0.4)
       thread_safe (~> 0.3, >= 0.3.1)
     diff-lcs (1.2.5)
@@ -80,7 +81,8 @@ GEM
     kontoapi-ruby (0.4.0)
       addressable (~> 2.3, >= 2.3.7)
       yajl-ruby (~> 1.2, >= 1.2.1)
-    loofah (2.0.3)
+    loofah (2.3.1)
+      crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.6.4)
       mime-types (>= 1.16, < 4)
@@ -122,8 +124,8 @@ GEM
     rails-dom-testing (2.0.1)
       activesupport (>= 4.2.0, < 6.0)
       nokogiri (~> 1.6.0)
-    rails-html-sanitizer (1.0.3)
-      loofah (~> 2.0)
+    rails-html-sanitizer (1.3.0)
+      loofah (~> 2.3)
     railties (5.0.0.1)
       actionpack (= 5.0.0.1)
       activesupport (= 5.0.0.1)