Update Jinja to 2.10.1

[emkll]

Description

The version of Jinja used is vulnerable to CVE-2019-10906, see pallet's advisory for more details.

Since neither SecureDrop nor Flask uses Jinja's SandboxedEnvironment, this vulnerability should not be exploitable on SecureDrop instances. It is however used in the development environment by sphynx and mypy (but don't use the format_map method that could be used to escape the sandbox).

Regardless, we should still update the dependency to ensure future functionality is secure and to reduce alert noise.

[redshiftzero]

upstream issue: ansible/molecule#1976

[redshiftzero]

the 2.20.2 release of molecule can be used now

[redshiftzero]

scratch that, that release is not from the main branch, it's from stable/2.20 which does not have the fix (ref: https://github.com/ansible/molecule/tree/stable/2.20)

[redshiftzero]

we can now update to molecule 2.22 to resolve this: https://github.com/ansible/molecule/blob/2.22/setup.cfg#L84