Bump sanitize from 2.1.0 to 4.6.6

Bumps [sanitize](https://github.com/rgrove/sanitize) from 2.1.0 to 4.6.6.
- [Release notes](https://github.com/rgrove/sanitize/releases)
- [Changelog](https://github.com/rgrove/sanitize/blob/master/HISTORY.md)
- [Commits](rgrove/sanitize@v2.1.0...v4.6.6)

Signed-off-by: dependabot[bot] <support@github.com>

Gemfile

@@ -37,7 +37,7 @@ gem 'axlsx_rails', '= 0.1.5'
 gem 'acts_as_xlsx', :git => 'git://github.com/randym/acts_as_xlsx.git', :ref => '919817e590b1cf8e27632e630469603c78a50402'
 gem "paperclip", '= 3.5.1'
 gem "delayed_paperclip", "= 2.7.0"
-gem 'sanitize', '= 2.1.0'
+gem 'sanitize', '4.6.6'
 gem 'mailboxer', '= 0.10.3'
 gem 'hashie', '= 2.1.2'
 gem 'detect_language', '=1.0.5'

Gemfile.lock

@@ -207,6 +207,7 @@ GEM
       coffee-script-source
       execjs
     coffee-script-source (1.10.0)
+    crass (1.0.5)
     deep_merge (1.1.1)
     deface (0.9.1)
       nokogiri (~> 1.5.0)
@@ -309,6 +310,8 @@ GEM
     net-ssh-gateway (1.1.0)
       net-ssh (>= 1.99.1)
     nokogiri (1.5.11)
+    nokogumbo (1.5.0)
+      nokogiri
     oai (0.3.1)
       builder (>= 2.0.0)
       faraday
@@ -418,8 +421,10 @@ GEM
     rubycas-client (2.3.9)
       activesupport
     rubyzip (1.0.0)
-    sanitize (2.1.0)
+    sanitize (4.6.6)
+      crass (~> 1.0.2)
       nokogiri (>= 1.4.4)
+      nokogumbo (~> 1.4)
     sass (3.4.21)
     sass-rails (3.2.6)
       railties (~> 3.2.0)
@@ -531,7 +536,7 @@ DEPENDENCIES
   rmagick (= 2.13.2)
   rspec-rails (= 2.9)
   rubyzip (= 1.0.0)
-  sanitize (= 2.1.0)
+  sanitize (= 4.6.6)
   sass-rails (= 3.2.6)
   scorm!
   selenium-webdriver (= 2.44.0)