Updated gumbo-parser to b646374dcf702532b89a6eb77efc90d3949c59e0
This is mostly @maxime2's security fixes, for parsing untrusted content
Bumping version, adding a note about untrusted content