Remove call to Kernel#gem
backport String#encoding_aware? and String#blank? encoding fixes from rails3
ignore "invalid byte sequence in UTF-8" from String#=~
bump mocha dependency
backport dynamic finder fix (CVE-2012-5664)
backport patches for CVE-2013-0333

https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo
Merge pull request #1 from github/cve-2013-0333

Backport Patches for CVE-2013-0333
apply patch for cve-2013-0277
Merge pull request #2 from github/cve-2013-0277

apply patch for cve-2013-0277
Revert "ignore "invalid byte sequence in UTF-8" from String#=~"

This reverts commit 18e9b2ffc9e148bfb9a2b6a081ccd5faa74eda6a.
short-circuit String#blank? when string is empty
Allow content_tag options to take an array [#1741 state:resolved] [rizwanreza, Nick Quaranto]

Example:
  content_tag('p', "limelight", :class => ["song", "play"])
  # => <p class="song play">limelight</p>

Signed-off-by: Pratik Naik <pratiknaik@gmail.com>
url_for no longer escapes HTML, the :escape option is also gone

Rationale: url_for is just a path/URL generator, it is the responsability of the caller to escape conveniently HTML needs it, JavaScript needs different escaping, a text mail needs no escaping at all, etc.

Backported to 2.3. Conflicts:
	actionpack/CHANGELOG
	actionpack/lib/action_view/helpers/url_helper.rb
	actionpack/test/template/url_helper_test.rb
s/escape_once/html_escape/, since html safety is the contract that now says whether something has to be escaped

Conflicts:
	actionpack/CHANGELOG
	actionpack/lib/action_view/helpers/form_tag_helper.rb
	actionpack/lib/action_view/helpers/url_helper.rb
	actionpack/test/template/url_helper_test.rb
fix boot on 1.9.3-p385

  rails-2.3.14.github14/lib/initializer.rb:906:in `replace': can't modify frozen String (RuntimeError)
  from gems/rails-2.3.14.github14/lib/initializer.rb:906:in `set_root_path!'
  from gems/rails-2.3.14.github14/lib/initializer.rb:860:in `initialize'
  from gems/rails-2.3.14.github14/lib/initializer.rb:110:in `new'
  from gems/rails-2.3.14.github14/lib/initializer.rb:110:in `run'
  from github/config/environment.rb:22:in `<top (required)>'
faster html escaping code from rails master
integrate monkey-patches from rails_xss/action_view
ActiveSupport::SafeBuffer from upstream rails 3.2
ActionView::OutputBuffer and Erubis handler from rails 3.2
optimize generated erb to reduce method calls

before:

        ');@output_buffer.append= ( content_icon row[:content] );@output_buffer.safe_concat('
');@output_buffer.safe_concat('        ');@output_buffer.append= ( spinner_img );@output_buffer.safe_concat('
');@output_buffer.safe_concat('      </td>
      <td class="content">
        ');@output_buffer.append= ( content_link row[:content] );@output_buffer.safe_concat('
');@output_buffer.safe_concat('      </td>
      <td class="message">
');

after:

        ';@output_buffer.append=( content_icon row[:content] );@output_buffer.safe_append='
        ';@output_buffer.append=( spinner_img );@output_buffer.safe_append='
      </td>
      <td class="content">
        ';@output_buffer.append=( content_link row[:content] );@output_buffer.safe_append='
      </td>
      <td class="message">
';