RedCloth Gem for Ruby contains a flaw that allows a cross-site scripting (XSS)
attack. This flaw exists because the program does not validate input when
parsing textile links before returning it to users. This may allow a remote
attacker to create a specially crafted request that would execute arbitrary
script code in a user's browser session within the trust relationship between
their browser and the server.

See the full diff on Github. The new version differs by 25 commits:

• javascript checks case insensitive, closes #25
• security fix, prepare 4.3.1
• 4.3.0 release
• Merge pull request #24 from jgarber/4.3-devel
• remove jruby and windows references. add ruby 2.2.3
• remove java and windows refs
• Update README.rdoc
• Update README.rdoc
• Update README.rdoc
• updated README
• updated README
• Merge pull request #20 from tpo/master
• Merge pull request #22 from pathawks/tests
• Use new Travis infrastructure
• Loosen bundler development dependency
• bump version
• fix CVE-2012-6684
• A plea for maintainers to take over RedCloth
• Initial Travis CI config
• Changelog entry for lazy-load latex
• Merge pull request #16 from charliesome/lazy-load-yaml
• lazy load latex_entities.yml
• Bump dependency versions
• Merge pull request #15 from jordimassaguerpla/master
• add license information to the gemspec

@​depfu rebase

Rebases against your default branch and redoes this update

@​depfu merge

Merges this PR once your tests are passing and conflicts are resolved

@​depfu reopen

Restores the branch and reopens this PR (if it's closed)

@​depfu pause

Ignores all future updates for this dependency and closes this PR

@​depfu pause [minor|major]

Ignores all future minor/major updates for this dependency and closes this PR

@​depfu resume

Future versions of this dependency will create PRs again (leaves this PR as is)