gv-RedCloth 4.2.9 → 4.3.2

data/lib/redcloth/formatters/base.rb

@@ -28,7 +28,7 @@ module RedCloth::Formatters
       opts.delete(:class) if filter_classes
       opts.delete(:id) if filter_ids
 
-      atts = ''
+      atts = ''.dup
       opts[:"text-align"] = opts.delete(:align)
       opts[:style] += ';' if opts[:style] && (opts[:style][-1..-1] != ';')
       [:float, :"text-align", :"vertical-align"].each do |a|

data/lib/redcloth/formatters/html.rb

@@ -111,15 +111,23 @@ module RedCloth::Formatters::HTML
   end
   
   def link(opts)
-    "<a href=\"#{escape_attribute opts[:href]}\"#{pba(opts)}>#{opts[:name]}</a>"
+    if (filter_html || sanitize_html) && opts[:href] =~ /^\s*javascript:/i
+      opts[:name]
+    else
+      "<a href=\"#{escape_attribute opts[:href]}\"#{pba(opts)}>#{opts[:name]}</a>"
+    end
   end
   
   def image(opts)
-    opts.delete(:align)
-    opts[:alt] = opts[:title]
-    img = "<img src=\"#{escape_attribute opts[:src]}\"#{pba(opts)} alt=\"#{escape_attribute opts[:alt].to_s}\" />"  
-    img = "<a href=\"#{escape_attribute opts[:href]}\">#{img}</a>" if opts[:href]
-    img
+    if (filter_html || sanitize_html) && ( opts[:src] =~ /^\s*javascript:/i || opts[:href] =~ /^\s*javascript:/i )
+      opts[:title]
+    else
+      opts.delete(:align)
+      opts[:alt] = opts[:title]
+      img = "<img src=\"#{escape_attribute opts[:src]}\"#{pba(opts)} alt=\"#{escape_attribute opts[:alt].to_s}\" />"  
+      img = "<a href=\"#{escape_attribute opts[:href]}\">#{img}</a>" if opts[:href]
+      img
+    end
   end
   
   def footno(opts)
@@ -319,7 +327,7 @@ private
     text.gsub!( /<(\/*)([A-Za-z]\w*)([^>]*?)(\s?\/?)>/ ) do |m|
       raw = $~
       tag = raw[2].downcase
-      if allowed_tags.has_key? tag
+      if allowed_tags.has_key? tag and allowed_tags[tag]
         pcs = [tag]
         allowed_tags[tag].each do |prop|
           ['"', "'", ''].each do |q|
@@ -331,7 +339,7 @@ private
               break
             end
           end
-        end if allowed_tags[tag]
+        end
         "<#{raw[1]}#{pcs.join " "}#{raw[4]}>"
       else # Unauthorized tag
         if block_given?

data/lib/redcloth/formatters/latex.rb

@@ -3,7 +3,9 @@ require 'yaml'
 module RedCloth::Formatters::LATEX
   include RedCloth::Formatters::Base
 
-  ENTITIES = YAML::load(File.read(File.dirname(__FILE__)+'/latex_entities.yml'))
+  def self.entities
+    @entities ||= YAML.load(File.read(File.dirname(__FILE__)+'/latex_entities.yml'))
+  end
 
   module Settings
     # Maps CSS style names to latex formatting options
@@ -163,7 +165,7 @@ module RedCloth::Formatters::LATEX
 
   # FIXME: need caption and label elements similar to image -> figure
   def table_close(opts)
-    output  = "\\begin{table}\n"
+    output  = "\\begin{table}\n".dup
     output << "  \\centering\n"
     output << "  \\begin{tabular}{ #{"l " * @table[0].size }}\n"
     @table.each do |row|
@@ -275,8 +277,8 @@ module RedCloth::Formatters::LATEX
   # TODO: what do we do with (unknown) unicode entities ? 
   #
   def entity(opts)
-    text = opts[:text][0..0] == '#' ? opts[:text][1..-1] : opts[:text] 
-    ENTITIES[text]
+    text = opts[:text][0..0] == '#' ? opts[:text][1..-1] : opts[:text]
+    RedCloth::Formatters::LATEX.entities[text]
   end
 
   def dim(opts)

data/lib/redcloth/version.rb

@@ -1,13 +1,13 @@
 module RedCloth
   module VERSION
     MAJOR = 4
-    MINOR = 2
-    TINY  = 9
-    RELEASE_CANDIDATE = nil
+    MINOR = 3
+    TINY  = 2
+#    RELEASE_CANDIDATE = 0
 
-    STRING = [MAJOR, MINOR, TINY, RELEASE_CANDIDATE].compact.join('.')
-    TAG = "REL_#{[MAJOR, MINOR, TINY, RELEASE_CANDIDATE].compact.join('_')}".upcase.gsub(/\.|-/, '_')
-    FULL_VERSION = "#{[MAJOR, MINOR, TINY, RELEASE_CANDIDATE].compact.join('.')}"
+    STRING = [MAJOR, MINOR, TINY].compact.join('.')
+    TAG = "REL_#{[MAJOR, MINOR, TINY].compact.join('_')}".upcase.gsub(/\.|-/, '_')
+    FULL_VERSION = "#{[MAJOR, MINOR, TINY].compact.join('.')}"
     
     class << self
       def to_s

data/redcloth.gemspec

@@ -23,23 +23,17 @@ Gem::Specification.new do |s|
   s.rdoc_options     = ["--charset=UTF-8", "--line-numbers", "--inline-source", "--title", "RedCloth", "--main", "README.rdoc"]
   s.require_paths   += ["lib/case_sensitive_require", "ext"]
 
-  s.files -= Dir['lib/redcloth.jar']
-  s.files -= Dir['lib/**/*.dll']
   s.files -= Dir['lib/**/*.bundle']
   s.files -= Dir['lib/**/*.so']
+
+  s.platform = 'ruby'
   
-  s.platform = RUBY_PLATFORM[/java/] || 'ruby'
-  case s.platform.to_s
-  when /java/
-    s.files += ['lib/redcloth_scan.jar']
-  else # MRI or Rubinius
-    s.files += %w[attributes inline scan].map {|f| "ext/redcloth_scan/redcloth_#{f}.c"}
-    s.files += ["ext/redcloth_scan/redcloth.h"]
-    s.extensions = Dir['ext/**/extconf.rb']
-  end
+  s.files += %w[attributes inline scan].map {|f| "ext/redcloth_scan/redcloth_#{f}.c"}
+  s.files += ["ext/redcloth_scan/redcloth.h"]
+  s.extensions = Dir['ext/**/extconf.rb']
 
-  s.add_development_dependency('bundler', '~> 1.1.1')
-  s.add_development_dependency('rake', '~> 0.9.2.2')
+  # s.add_development_dependency('bundler', '> 1.3.4')
+  # s.add_development_dependency('rake', '~> 10.0.3')
   s.add_development_dependency('rspec', '~> 2.4')
   s.add_development_dependency('diff-lcs', '~> 1.1.2')
   
@@ -47,6 +41,6 @@ Gem::Specification.new do |s|
   # gem packaging. Otherwise, Bundler complains that they're
   # not installed even though they're not required.
   # See https://github.com/carlhuda/bundler/issues/issue/1021
-  s.add_development_dependency('rvm', '~> 1.2.6')
-  s.add_development_dependency('rake-compiler', '~> 0.7.1')
+  # s.add_development_dependency('rvm', '~> 1.2.6')
+  # s.add_development_dependency('rake-compiler', '~> 0.7.1')
 end

data/spec/custom_tags_spec.rb

@@ -4,7 +4,7 @@ module FigureTag
   def fig( opts )
     label, img = opts[:text].split('|').map! {|str| str.strip}
 
-    html  = %Q{<div class="img" id="figure-#{label.tr('.', '-')}">\n}
+    html  = %Q{<div class="img" id="figure-#{label.tr('.', '-')}">\n}.dup
     html << %Q{  <a class="fig" href="/images/#{img}">\n}
     html << %Q{    <img src="/images/thumbs/#{img}" alt="Figure #{label}" />\n}
     html << %Q{  </a>\n}
@@ -15,13 +15,13 @@ end
 
 describe "custom tags" do
   it "should recognize the custom tag" do
-    input  = %Q{The first line of text.\n\n}
+    input  = %Q{The first line of text.\n\n}.dup
     input << %Q{fig. 1.1 | img.jpg\n\n}
     input << %Q{The last line of text.\n}
     r = RedCloth.new input
     r.extend FigureTag
 
-    html  = %Q{<p>The first line of text.</p>\n}
+    html  = %Q{<p>The first line of text.</p>\n}.dup
     html << %Q{<div class="img" id="figure-1-1">\n}
     html << %Q{  <a class="fig" href="/images/img.jpg">\n}
     html << %Q{    <img src="/images/thumbs/img.jpg" alt="Figure 1.1" />\n}
@@ -47,4 +47,4 @@ describe "custom tags" do
 
     r.to_html.should == html
   end
-end
+end

data/spec/fixtures/threshold.yml

@@ -159,7 +159,7 @@ in: '"link text":http://example.com/'
 html: <p><a href="http://example.com/">link text</a></p>
 ---
 name: local links
-desc: The host name may be ommitted for local links.
+desc: The host name may be omitted for local links.
 in: '"link text":/example'
 html: <p><a href="/example">link text</a></p>
 ---

data/spec/parser_spec.rb

@@ -6,13 +6,13 @@ describe RedCloth do
     it "should accept options" do
       lambda {
         RedCloth.new("test", [:hard_breaks])
-      }.should_not raise_error(ArgumentError)
+      }.should_not raise_error
     end
   end
   
   it "should have a VERSION" do
-    RedCloth.const_defined?("VERSION").should be_true
-    RedCloth::VERSION.const_defined?("STRING").should be_true
+    RedCloth.const_defined?("VERSION").should be_truthy
+    RedCloth::VERSION.const_defined?("STRING").should be_truthy
   end
   
   it "should show the version as a string" do
@@ -21,7 +21,7 @@ describe RedCloth do
   end
   
   it "should have EXTENSION_LANGUAGE" do
-    RedCloth.const_defined?("EXTENSION_LANGUAGE").should be_true
+    RedCloth.const_defined?("EXTENSION_LANGUAGE").should be_truthy
     RedCloth::EXTENSION_LANGUAGE.should_not be_empty
     RedCloth::DESCRIPTION.should include(RedCloth::EXTENSION_LANGUAGE)
   end
@@ -85,8 +85,9 @@ describe RedCloth do
   
   if RUBY_VERSION > "1.9.0"
     it "should preserve character encoding" do
-      input = "This is an ISO-8859-1 string"
+      input = "This is an ISO-8859-1 string".dup
       input.force_encoding 'iso-8859-1'
+
       output = RedCloth.new(input).to_html
       
       output.should == "<p>This is an <span class=\"caps\">ISO</span>-8859-1 string</p>"
@@ -94,7 +95,7 @@ describe RedCloth do
     end
     
     it "should not raise ArgumentError: invalid byte sequence" do
-      s = "\xa3"
+      s = "\xa3".dup
       s.force_encoding 'iso-8859-1'
       lambda { RedCloth.new(s).to_html }.should_not raise_error
     end

data/spec/security/CVE-2012-6684_spec.rb

@@ -0,0 +1,33 @@
+# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6684
+
+require 'redcloth'
+
+describe 'CVE-2012-6684' do
+
+  it 'should not let javascript links pass through' do
+    # PoC from http://co3k.org/blog/redcloth-unfixed-xss-en
+    output = RedCloth.new('["clickme":javascript:alert(%27XSS%27)]', [:filter_html, :filter_styles, :filter_classes, :filter_ids]).to_html
+    expect(output).to_not match(/href=.javascript:alert/)
+
+    output = RedCloth.new('["clickme":jAvascript:alert(%27XSS%27)]', [:filter_html, :filter_styles, :filter_classes, :filter_ids]).to_html
+    expect(output).to_not match(/href=.jAvascript:alert/)
+  end
+
+  it 'should not let javascript links pass through on images' do
+  	output = RedCloth.new('"!<javascript:alert(1)(2)!:javascript:prompt(document.domain)"').to_html
+    expect(output).to match(/src=.javascript:alert/)
+    expect(output).to match(/href=.javascript:prompt/)
+
+    output = RedCloth.new('"!<javascript:alert(1)(2)!:javascript:prompt(document.domain)"', [:filter_html, :filter_styles, :filter_classes, :filter_ids]).to_html
+    expect(output).to_not match(/src=.javascript:alert/)
+    expect(output).to_not match(/href=.javascript:prompt/)
+
+    output = RedCloth.new('"!<jAvascript:alert(1)(2)!:jAvascript:prompt(document.domain)"').to_html
+    expect(output).to match(/src=.jAvascript:alert/)
+    expect(output).to match(/href=.jAvascript:prompt/)
+
+    output = RedCloth.new('"!<jAvascript:alert(1)(2)!:jAvascript:prompt(document.domain)"', [:filter_html, :filter_styles, :filter_classes, :filter_ids]).to_html
+    expect(output).to_not match(/src=.jAvascript:alert/)
+    expect(output).to_not match(/href=.jAvascript:prompt/)
+  end
+end

data/spec/spec_helper.rb

@@ -26,11 +26,11 @@ def fixtures
   Dir[File.join(File.dirname(__FILE__), *%w[fixtures *.yml])].each do |testfile|
     testgroup = File.basename(testfile, '.yml')
     num = 0
-    YAML::load_documents(File.open(testfile)) do |doc|
+    YAML::load_stream(File.open(testfile)) do |doc|
       name = doc['name'] || num
       @fixtures["#{testgroup} #{name}"] = doc
       num += 1
     end
   end
   @fixtures
-end
+end

data/tasks/compile.rake

@@ -12,19 +12,16 @@ CLOBBER.include [
 ]
 
 # Load the Gem specification for the current platform (Ruby or JRuby).
-def gemspec(platform = RUBY_PLATFORM[/java/] || 'ruby')
+def gemspec(platform = 'ruby')
   Gem::Specification.load(File.expand_path('../../redcloth.gemspec', __FILE__))
 end
 
 require 'rake/extensiontask'
-require 'rake/javaextensiontask'
 require File.dirname(__FILE__) + '/ragel_extension_task'
 
-if defined?(JRUBY_VERSION)
-  Rake::JavaRagelExtensionTask.new('redcloth_scan', gemspec)
-else
-  extconf = "ext/redcloth_scan/extconf.rb"
-  file extconf do
+
+extconf = "ext/redcloth_scan/extconf.rb"
+file extconf do
     FileUtils.mkdir(File.dirname(extconf)) unless File.directory?(File.dirname(extconf))
     File.open(extconf, "w") do |io|
       io.write(<<-EOF)
@@ -36,12 +33,7 @@ have_library("c", "main")
 create_makefile("redcloth_scan")
       EOF
     end
-  end
+end
 
-  Rake::RagelExtensionTask.new("redcloth_scan", gemspec) do |ext|
-    if ENV['RUBY_CC_VERSION']
-      ext.cross_compile = true
-      ext.cross_platform = ['i386-mingw32', 'i386-mswin32-60']
-    end
-  end
+Rake::RagelExtensionTask.new("redcloth_scan", gemspec) do |ext|
 end

data/tasks/ragel_extension_task.rb

@@ -42,17 +42,14 @@ module Rake
       {
         'scan' => {
           'c'    => "#{@ext_dir}/redcloth_scan.c",
-          'java' => "#{@ext_dir}/RedclothScanService.java",
           'rb'   => "#{@ext_dir}/redcloth_scan.rb"
         },
         'inline' => {
           'c'    => "#{@ext_dir}/redcloth_inline.c",
-          'java' => "#{@ext_dir}/RedclothInline.java",
           'rb'   => "#{@ext_dir}/redcloth_inline.rb"
         },
         'attributes' => {
           'c'    => "#{@ext_dir}/redcloth_attributes.c",
-          'java' => "#{@ext_dir}/RedclothAttributes.java",
           'rb'   => "#{@ext_dir}/redcloth_attributes.rb"
         }
       }[machine][lang]
@@ -88,7 +85,6 @@ module Rake
     def host_language_flag
       {
         'c'      => 'C',
-        'java'   => 'J',
         'rb'     => 'R'
       }[lang]
     end
@@ -96,7 +92,6 @@ module Rake
     def preferred_code_style
       {
         'c'      => 'T0',
-        'java'   => nil,
         'rb'     => 'F1'
       }[lang]
     end
@@ -117,11 +112,5 @@ module Rake
       "c"
     end
   end  
-  class JavaRagelExtensionTask < JavaExtensionTask
-    include RagelGenerationTasks
-    
-    def lang
-      "java"
-    end
-  end
+  
 end

data/tasks/release.rake

@@ -1,15 +1,16 @@
 namespace :release do
-  desc 'Upload all packages and tag git'
-  task :all => ['build:all', :release, :push_native_gems]
+  desc 'Push all gems to rubygems.org'
+  # git tag and push tag
+  # git tag vx.x.x
+  # git push --follow-tags
+  # branch into stable vx.x branch
+  # change version in version.rb
+  # update changelog
+  # run rake test
 
-  desc 'Push all gems to rubygems.org (gemcutter)'
-  task :push_native_gems do
-    Dir.chdir('pkg') do
-      Dir['*.gem'].select {|g| g =~ /\w+-[^-]+-\w+.gem/ }.each do |gem_file|
-        sh("gem push #{gem_file}")
-      end
-    end
+  task :gem do
+    sh("gem build redcloth.gemspec")
+    sh("gem push RedCloth-*.gem")
   end
 end
 
-Rake::Task['release'].prerequisites.unshift('build')

data/tasks/rvm.rake

@@ -1,12 +1,14 @@
+require 'rvm'
+
 namespace :rvm do
   
-  RVM_RUBIES = ['jruby-1.5.6' , 'ruby-1.8.6-p398', 'ruby-1.9.1-p243', 'ruby-1.9.2-p136', 'ree-1.8.7-2010.02']
+  RVM_RUBIES = ['ruby-1.8.6-p398', 'ruby-1.9.1-p243', 'ruby-1.9.2-p136', 'ruby-2.2.3p173']
   RVM_GEMSET_NAME = 'redcloth'
   
   task :setup do
     unless @rvm_setup
       rvm_lib_path = "#{`echo $rvm_path`.strip}/lib"
-      $LOAD_PATH.unshift(rvm_lib_path) unless $LOAD_PATH.include?(rvm_lib_path)
+      #$LOAD_PATH.unshift(rvm_lib_path) unless $LOAD_PATH.include?(rvm_lib_path)
       require 'rvm'
       require 'tmpdir'
       @rvm_setup = true
@@ -21,7 +23,7 @@ namespace :rvm do
       # gets confused when locked to java and running ruby and vice-versa.
       STDERR << RVM.run('bundle update').stderr 
             
-      result = RVM.perform_set_operation(:rake)
+      result = RVM.run("rake test")
       STDOUT << result.stdout
       STDERR << result.stderr
     end

metadata

@@ -1,8 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: gv-RedCloth
 version: !ruby/object:Gem::Version
-  version: 4.2.9
-  prerelease: 
+  version: 4.3.2
 platform: ruby
 authors:
 - Jason Garber
@@ -11,74 +10,36 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2012-07-19 00:00:00.000000000 Z
+date: 2017-11-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: bundler
-  requirement: &70156852591300 !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: 1.1.1
-  type: :development
-  prerelease: false
-  version_requirements: *70156852591300
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: &70156852590780 !ruby/object:Gem::Requirement
-    none: false
+  name: rspec
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.9.2.2
+        version: '2.4'
   type: :development
   prerelease: false
-  version_requirements: *70156852590780
-- !ruby/object:Gem::Dependency
-  name: rspec
-  requirement: &70156852590320 !ruby/object:Gem::Requirement
-    none: false
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: '2.4'
-  type: :development
-  prerelease: false
-  version_requirements: *70156852590320
 - !ruby/object:Gem::Dependency
   name: diff-lcs
-  requirement: &70156852589820 !ruby/object:Gem::Requirement
-    none: false
+  requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 1.1.2
   type: :development
   prerelease: false
-  version_requirements: *70156852589820
-- !ruby/object:Gem::Dependency
-  name: rvm
-  requirement: &70156852589360 !ruby/object:Gem::Requirement
-    none: false
-    requirements:
-    - - ~>
-      - !ruby/object:Gem::Version
-        version: 1.2.6
-  type: :development
-  prerelease: false
-  version_requirements: *70156852589360
-- !ruby/object:Gem::Dependency
-  name: rake-compiler
-  requirement: &70156852588860 !ruby/object:Gem::Requirement
-    none: false
+  version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ~>
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.7.1
-  type: :development
-  prerelease: false
-  version_requirements: *70156852588860
+        version: 1.1.2
 description: Textile parser for Ruby.
 email: redcloth-upwards@rubyforge.org
 executables:
@@ -90,16 +51,22 @@ extra_rdoc_files:
 - COPYING
 - CHANGELOG
 files:
-- .gemtest
-- .rspec
+- ".gemtest"
+- ".rspec"
 - CHANGELOG
 - COPYING
 - Gemfile
 - README.rdoc
 - Rakefile
-- doc/textile_reference.html
 - bin/redcloth
+- doc/textile_reference.html
+- ext/redcloth_scan/extconf.rb
+- ext/redcloth_scan/redcloth.h
+- ext/redcloth_scan/redcloth_attributes.c
+- ext/redcloth_scan/redcloth_inline.c
+- ext/redcloth_scan/redcloth_scan.c
 - lib/case_sensitive_require/RedCloth.rb
+- lib/redcloth.rb
 - lib/redcloth/erb_extension.rb
 - lib/redcloth/formatters/base.rb
 - lib/redcloth/formatters/html.rb
@@ -107,7 +74,6 @@ files:
 - lib/redcloth/formatters/latex_entities.yml
 - lib/redcloth/textile_doc.rb
 - lib/redcloth/version.rb
-- lib/redcloth.rb
 - lib/tasks/pureruby.rake
 - redcloth.gemspec
 - spec/benchmark_spec.rb
@@ -141,6 +107,7 @@ files:
 - spec/formatters/sanitized_html_spec.rb
 - spec/formatters/style_filtered_html_spec.rb
 - spec/parser_spec.rb
+- spec/security/CVE-2012-6684_spec.rb
 - spec/spec_helper.rb
 - tasks/compile.rake
 - tasks/gems.rake
@@ -148,50 +115,38 @@ files:
 - tasks/release.rake
 - tasks/rspec.rake
 - tasks/rvm.rake
-- ext/redcloth_scan/redcloth_attributes.c
-- ext/redcloth_scan/redcloth_inline.c
-- ext/redcloth_scan/redcloth_scan.c
-- ext/redcloth_scan/redcloth.h
-- ext/redcloth_scan/extconf.rb
 homepage: http://redcloth.org
 licenses: []
+metadata: {}
 post_install_message: 
 rdoc_options:
-- --charset=UTF-8
-- --line-numbers
-- --inline-source
-- --title
+- "--charset=UTF-8"
+- "--line-numbers"
+- "--inline-source"
+- "--title"
 - RedCloth
-- --main
+- "--main"
 - README.rdoc
 require_paths:
 - lib
 - lib/case_sensitive_require
 - ext
 required_ruby_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
-      segments:
-      - 0
-      hash: 3378025243211520174
 required_rubygems_version: !ruby/object:Gem::Requirement
-  none: false
   requirements:
-  - - ! '>='
+  - - ">="
     - !ruby/object:Gem::Version
       version: '0'
-      segments:
-      - 0
-      hash: 3378025243211520174
 requirements: []
 rubyforge_project: redcloth
-rubygems_version: 1.8.11
+rubygems_version: 2.2.2
 signing_key: 
-specification_version: 3
-summary: RedCloth-4.2.9
+specification_version: 4
+summary: RedCloth-4.3.2
 test_files:
 - spec/benchmark_spec.rb
 - spec/custom_tags_spec.rb
@@ -224,4 +179,5 @@ test_files:
 - spec/formatters/sanitized_html_spec.rb
 - spec/formatters/style_filtered_html_spec.rb
 - spec/parser_spec.rb
+- spec/security/CVE-2012-6684_spec.rb
 - spec/spec_helper.rb