Update to commit 720db72 to fix a security issue.
Reported by: Bryan Steele (@canadianbryan on Twitter)