Less remote arbitrary code execution, please. (see: https://groups.google.com/forum/#!topic/rubyonrails-security/61bkgvnSGTQ/discussion )
Merge branch 'master' into memberships
Adding some additional constraints around memberships.