Create a blacklist to disallow mutator methods to be delegated to `Array`.

This change was necessary because the whitelist wouldn't work.
It would be painful for users trying to update their applications.

This blacklist intent to prevent odd bugs and confusion in code that call mutator
methods directely on the `Relation`.
Merge pull request #13314 from laurocaetano/blacklist_array_methods

Create a blacklist to disallow mutator methods to be delegated to Array

Conflicts:
	guides/source/upgrading_ruby_on_rails.md
CSRF protection from cross-origin <script> tags

Thanks to @homakov for sounding the alarm about JSONP-style data leaking
Merge pull request #13345 from jeremy/get-csrf

CSRF protection from cross-origin <script> tags
Fix integration test to pass same-origin verification
Discuss Action Pack's new CSRF protection from remote script tags and what it means for your app. In short, update your tests if they don't already use the 'xhr :post' style.
Mention new CSRF protection gotcha in upgrade guide
Clearly limit new CSRF protection to GET requests
Remove the navigator for now. Its ugly and it promises more than it can deliver. These other views (properties, routes) are not designed to be loaded in isolation
Get ready to release 4.1.0.beta1
Fix dependency order
Its beta1 all around
[ci skip] Prettify the removals from Action Controller in 4.1 release notes.
Merge pull request #13358 from JuanitoFatas/patch/release-notes

Prettify the removals from Action Controller in 4.1 release notes. [ci skip]
Add a failing test for assigning nil to a polymorphic belongs_to not nullifying its _type column
allow video_tag to accept `size` as `Number` for square shaped videos
typo: should be 'DateTime.civil_from_format' and not 'DateTime.civil_from_fromat'
Merge pull request #13364 from corprew/patch-1

typo: should be 'DateTime.civil_from_format' and not 'DateTime.civil_from_fromat'
Merge pull request #13363 from kuldeepaggarwal/f-video-options

allow video_tag to accept `size` as `Number` for square shaped videos
we should use annotated tags for releases.

Annotated tags will provide us with Tagger and Time information.