diff --git a/Gemfile b/Gemfile
index 386597f7b..a60e174ea 100644
--- a/Gemfile
+++ b/Gemfile
@@ -47,7 +47,7 @@ gem 'gibbon', '~> 3.4.1'
 
 gem 'stripe'
 
-gem 'rails-html-sanitizer', '~> 1.3.0'
+gem 'rails-html-sanitizer', '~> 1.4.2'
 
 gem 'jbuilder'
 gem 'public_activity'
diff --git a/Gemfile.lock b/Gemfile.lock
index fc06e8ee1..38d0750a8 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -169,7 +169,7 @@ GEM
       addressable (~> 2.7)
     letter_opener (1.7.0)
       launchy (~> 2.2)
-    loofah (2.9.1)
+    loofah (2.12.0)
       crass (~> 1.0.2)
       nokogiri (>= 1.5.9)
     mail (2.7.1)
@@ -264,7 +264,7 @@ GEM
       activesupport (>= 4.2.0, < 5.0)
       nokogiri (~> 1.6)
       rails-deprecated_sanitizer (>= 1.0.1)
-    rails-html-sanitizer (1.3.0)
+    rails-html-sanitizer (1.4.2)
       loofah (~> 2.3)
     rails4-autocomplete (1.1.1)
       rails (>= 3.0)
@@ -446,7 +446,7 @@ DEPENDENCIES
   puma
   pundit
   rails (= 4.2.11.3)
-  rails-html-sanitizer (~> 1.3.0)
+  rails-html-sanitizer (~> 1.4.2)
   rails4-autocomplete
   rails_12factor
   rolify