Fix CVE-2013-0256

Fixed an XSS exploit in darkfish.js.  This could lead to cookie
disclosure to third parties.  See CVE-2012-0256.rdoc for full details
including a patch you can apply to generated RDoc documentation.
Fix CVE number in History