we haven't monkey patched the Result class, so use each
3.0.15
updating changelogs
* Do not convert digest auth strings to symbols. CVE-2012-3424
updating changelog with CVE
updating release date
bumping to 3.0.16
Backport of fix from #5173 - fixes #7252

Rather than use the MySQL specific TINYTEXT, MEDIUMTEXT and LONGTEXT
datatypes, Active Record migrations use TEXT(n) where n is the limit
specified by the developer. Unfortunately how MySQL interprets n
depends on the column's encoding so any limit above 5592405 will be
interpreted as a LONGTEXT when the encoding is UTF-8.

This commit fixes this by interpreting the limit within the adapter
and using the specific MySQL datatype as appropriate.
html_escape should escape single quotes

https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content
Closes #7215

Conflicts:
	actionpack/test/controller/new_base/render_template_test.rb
	actionpack/test/template/asset_tag_helper_test.rb
	actionpack/test/template/erb_util_test.rb
	actionpack/test/template/javascript_helper_test.rb
	actionpack/test/template/template_test.rb
	activesupport/lib/active_support/core_ext/string/output_safety.rb
	activesupport/test/core_ext/string_ext_test.rb
	railties/test/application/assets_test.rb
Fix tests about single quote escaping
escape select_tag :prompt values

CVE-2012-3463
Do not mark strip_tags result as html_safe

Thanks to Marek Labos & Nethemba

CVE-2012-3465
Add CHANGELOG entries
Bump to 3.0.17
Add html_escape note to CHANGELOG
Merge pull request #7308 from amerine/3-0-stable

Add html_escape note to CHANGELOG
Remove warning when using html_escape with Ruby 1.9.

Closes #7430
updating changelogs
CVE-2012-5664 options hashes should only be extracted if there are extra parameters
bumping to 3.0.18