use the decimal HTML escape code for single quotes instead of the hex one so webkit-based browsers properly translate the code in form fields
Fix the tests related with single quotes being escaped

Closes #9144
Fixes #9145
Docs: Fixed bad exists? documentation.

Base#exists? does not actually take options like finder methods. Trying
to use what the documentation suggests will return a PG error because it
will look for a column named 'conditions'.

I changed the documentation to reflect how the exists? method actually
works.
Merge pull request #9194 from kwstannard/2-3-stable

Docs: Fixed bad exists? documentation.
fixing attr_protected CVE-2013-0276
fix serialization vulnerability
bumping to 2.3.17
Update activesupport/lib/active_support/core_ext/time/calculations.rb

Just maintaining the coherence with other methods, since everything has "at_" as prefix.
Merge pull request #9251 from Davidslv/patch-1

Add alias to maintain coherence with other methods, in end_of_day
Revert "Merge pull request #9251 from Davidslv/patch-1"

This reverts commit d6adcb4ed35b5626780f7e6130631fe2dfe2ac43, reversing
changes made to 2e4aa39ee6cd56b8d544fda01670f5a48548f13e.

Reason: merged to unmaintained branch.
Merge branch '2-3-sec' into 2-3-stable

* 2-3-sec:
  bumping to 2.3.17
  fix serialization vulnerability
  fixing attr_protected CVE-2013-0276
Revert "Switched to newer rdoc and gem package tasks (and their requires)."

This is a manual revert of commit 79aa54d, since the commit itself touches
in addition some version numbers.

API generation before Rails 3 uses the Jamis template, which requires an
old version of RDoc. To generate the API you need Rake 0.8.x or 0.9.x,
and the RDoc distributed with 1.8.7 (version 1.0.1).
Merge branch '2-3-stable' of git://github.com/rails/rails into 2-3-stable