Bump phoenix_html from 2.9.3 to 2.11.0

[dependabot-preview]

Bumps phoenix_html from 2.9.3 to 2.11.0.

Changelog

Sourced from phoenix_html's changelog.

v2.11.0 (2018-03-09)

• Enhancements

  • Add date, datetime-local and time input types
  • Enable string keys to be usable with forms
  • Support carriage return in text_to_html
  • Add support for HTML5 boolean attributes to content_tag and tag
  • Improve performance by relying on html_safe_to_iodata/1
  • Protect against CSRF tokens leaking across hosts when the POST URL is dynamic

• Bug fixes

  • Guarantee input_name/2 always returns strings
  • Improve handling of uncommon whitespace and null in escape_javascript
  • Escape value attribute so it is never treated as a boolean

v2.10.5 (2017-11-08)

• Enhancements
  • Do not require the :as option in form_for

v2.10.4 (2017-08-15)

• Bug fixes
  • Fix formatting of days in datetime_builder

v2.10.3 (2017-07-30)

• Enhancements

  • Allow specifying a custom CSRF token generator

• Bug fixes

  • Do not submit method: :get in buttons as "post"

v2.10.2 (2017-07-24)

• Bug fixes
  • Traverse DOM elements up when handling data-method

v2.10.1 (2017-07-22)

• Bug fixes
  • Only generate CSRF token if necessary

v2.10.0 (2017-07-21)

• Enhancements

  • Support custom attributes in options in select

• Bug fixes

  • Accept non-binary values in textarea's content
    ... (truncated)

Commits

• 59963b9 Release v2.11.0
• 30b6ae9 Clarify host CSRF protection role
• c5843ae Do not leak csrf tokens to external domains on parameter injection, closes #196
• d0751c0 Add .formatter.exs file
• 1cd4adf Bump dependencies, update changelog and format code
• 406ebc8 input_name should return a String when passed an unnamed form (#201)
• ed136b0 Add README.md to package too
• 1f751e1 Enable string keys to be usable with forms (#198)
• ac900eb Make id generation of radion buttons work with string, which are html escaped...
• 658a0cc Fix id generation on radio buttons (#195)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

If you'd like to skip this version, you can just close this PR. If you have any feedback just mention @dependabot in the comments below.

---

Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

[dependabot-preview]

Superseded by #11.