(#21971) Create test to show exploit of resource_type

This test creates a file in the tmp directory on the master, opens up
access to the resource_type endpoint, and then makes a request that
causes the file placed in tmp to be evaluated. If the exploit works,
then a file is placed in /tmp on the master.
(#21971) Add test for accessing based on master being at root

The master process, when it daemonized, switches the current working
directory to /. This means that all paths are easily knowable by a user
and no directory traversal is needed to get to any file on the file
system. The type loading code does not protect from this by making sure
that any types that are requested only appear in the known-good
directories (the manifest dirs in the modulepath) and so can be caused
to load code from anywhere on the system.
Doc cleanup on create_resources example

The two items in the hash must be separated by a comma and group isn't a valid parameter to the user resource.
(doc) Merge branch 'nibalizer-patch-1' into stable

* nibalizer-patch-1:
  Doc cleanup on create_resources example

Documentation only update, merging into stable.
(#22772) Fix test for saving empty data

This test was failing due to a bug in the test, which didn't show up because
it was checking for too broad of an error.
(#22772) Allow a PUT with an empty body
(#22772) Add error checking to yaml format

This will raise a FormatError if asked to intern invalid YAML instead of an
unintelligible ruby error.
Merge pull request #1969 from pcarlisle/ticket/22772-empty-filebucket-save

Fix saving empty files to filebucket
Merge branch 'fix/stable/windows-spec-fixes' of git://github.com/Iristyle/puppet into stable

* 'fix/stable/windows-spec-fixes' of git://github.com/Iristyle/puppet:
  (maint) Windows failing spec fixes
(maint) Move constant outside shared_examples_for to avoid "already initialized" warning
(packaging) Update PUPPETVERSION for 3.3.1