Bump the Big List of Naughty Strings test (dart-lang/markdown#291)

diff --git a/pkgs/markdown/test/blns.dart b/pkgs/markdown/test/blns.dart
index 89afc70..024245c 100644
--- a/pkgs/markdown/test/blns.dart
+++ b/pkgs/markdown/test/blns.dart

@@ -2,7 +2,7 @@
 //
 // This file was generated from big-list-of-naughty-strings's JSON file:
 // https://github.com/minimaxir/big-list-of-naughty-strings/raw/master/blns.json
-// at 2019-03-26 11:59:01.647188 by the script, tool/update_blns.dart.
+// at 2020-05-27 21:54:09.623750 by the script, tool/update_blns.dart.
 
 const blns = <String>[
   '',
@@ -21,6 +21,7 @@
   'FALSE',
   'None',
   'hasOwnProperty',
+  'then',
   '\\',
   '\\\\',
   '0',
@@ -99,7 +100,7 @@
   '!@#\$%^&*()`~',
   '',
   '',
-  '	                  　',
+  '	                  　',
   '؀؁؂؃؄؅؜۝܏᠎‌‍‎‏‪‫‬‭‮⁠⁡⁢⁣⁤⁦⁧⁨⁩⁪⁫⁬⁭⁮⁯￹￺￻𑂽𛲠𛲡𛲢𛲣𝅳𝅴𝅵𝅶𝅷𝅸𝅹𝅺󠀁󠀠󠀡󠀢󠀣󠀤󠀥󠀦󠀧󠀨󠀩󠀪󠀫󠀬󠀭󠀮󠀯󠀰󠀱󠀲󠀳󠀴󠀵󠀶󠀷󠀸󠀹󠀺󠀻󠀼󠀽󠀾󠀿󠁀󠁁󠁂󠁃󠁄󠁅󠁆󠁇󠁈󠁉󠁊󠁋󠁌󠁍󠁎󠁏󠁐󠁑󠁒󠁓󠁔󠁕󠁖󠁗󠁘󠁙󠁚󠁛󠁜󠁝󠁞󠁟󠁠󠁡󠁢󠁣󠁤󠁥󠁦󠁧󠁨󠁩󠁪󠁫󠁬󠁭󠁮󠁯󠁰󠁱󠁲󠁳󠁴󠁵󠁶󠁷󠁸󠁹󠁺󠁻󠁼󠁽󠁾󠁿',
   '',
   '',
@@ -138,6 +139,7 @@
   '社會科學院語學研究所',
   '울란바토르',
   '𠜎𠜱𠝹𠱓𠱸𠲖𠳏',
+  '𐐜 𐐔𐐇𐐝𐐀𐐡𐐇𐐓 𐐙𐐊𐐡𐐝𐐓/𐐝𐐇𐐗𐐊𐐤𐐔 𐐒𐐋𐐗 𐐒𐐌 𐐜 𐐡𐐀𐐖𐐇𐐤𐐓𐐝 𐐱𐑂 𐑄 𐐔𐐇𐐝𐐀𐐡𐐇𐐓 𐐏𐐆𐐅𐐤𐐆𐐚𐐊𐐡𐐝𐐆𐐓𐐆',
   '表ポあA鷗ŒéＢ逍Üßªąñ丂㐀𠀀',
   'Ⱥ',
   'Ⱦ',
@@ -152,12 +154,15 @@
   '(ﾉಥ益ಥ）ﾉ ┻━┻',
   '┬─┬ノ( º _ ºノ)',
   '( ͡° ͜ʖ ͡°)',
+  '¯\\_(ツ)_/¯',
   '😍',
   '👩🏽',
+  '👨‍🦰 👨🏿‍🦰 👨‍🦱 👨🏿‍🦱 🦹🏿‍♂️',
   '👾 🙇 💁 🙅 🙆 🙋 🙎 🙍',
   '🐵 🙈 🙉 🙊',
   '❤️ 💔 💌 💕 💞 💓 💗 💖 💘 💝 💟 💜 💛 💚 💙',
   '✋🏿 💪🏿 👐🏿 🙌🏿 👏🏿 🙏🏿',
+  '👨‍👩‍👦 👨‍👩‍👧‍👦 👨‍👨‍👦 👩‍👩‍👧 👨‍👦 👨‍👧‍👦 👩‍👦 👩‍👧‍👦',
   '🚾 🆒 🆓 🆕 🆖 🆗 🆙 🏧',
   '0️⃣ 1️⃣ 2️⃣ 3️⃣ 4️⃣ 5️⃣ 6️⃣ 7️⃣ 8️⃣ 9️⃣ 🔟',
   '🇺🇸🇷🇺🇸 🇦🇫🇦🇲🇸',
@@ -170,7 +175,9 @@
   'הָיְתָהtestالصفحات التّحول',
   '﷽',
   'ﷺ',
-  'مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ، ',
+  'مُنَاقَشَةُ سُبُلِ اِسْتِخْدَامِ اللُّغَةِ فِي النُّظُمِ الْقَائِمَةِ وَفِيم يَخُصَّ التَّطْبِيقَاتُ الْحاسُوبِيَّةُ، ',
+  '᚛ᚄᚓᚐᚋᚒᚄ ᚑᚄᚂᚑᚏᚅ᚜‪‪‪',
+  '‪‪᚛                 ᚜‪',
   '‪‪test‪',
   '‫test‫',
   ' test ',
@@ -431,6 +438,7 @@
   '1\'; DROP TABLE users-- 1',
   '\' OR 1=1 -- 1',
   '\' OR \'1\'=\'1',
+  '\'; EXEC sp_MSForEachTable \'DROP TABLE ?\'; --',
   ' ',
   '%',
   '_',
@@ -509,4 +517,7 @@
   'Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗',
   '🏳0🌈️',
   'జ్ఞ‌ా',
+  'گچپژ',
+  '{% print \'x\' * 64 * 1024**3 %}',
+  '{{ "".__class__.__mro__[2].__subclasses__()[40]("/etc/passwd").read() }}',
 ];

diff --git a/pkgs/markdown/test/blns_test.dart b/pkgs/markdown/test/blns_test.dart
index 5ef04de..846ce8e 100644
--- a/pkgs/markdown/test/blns_test.dart
+++ b/pkgs/markdown/test/blns_test.dart

@@ -16,7 +16,7 @@
     // This is more a test of update_blns.dart: we're testing that the strings
     // were encoded half-decently, and nothing got globbed up into a big
     // multiline string.
-    expect(blns, hasLength(504));
+    expect(blns, hasLength(515));
   });
 
   var index = 0;