fixed failing JSON decoding in rails 3-0-stable
active_record: Quote numeric values compared to string columns.
mysql2 adapter fixed upstream to delegate quoting of BigDecimal.
Merge pull request #9210 from dylanahsmith/3-0-mysql-quote-numeric

[3.0] active_record: Quote numeric values compared to string columns.
Fix BigDecimal Typecast on 1.8.7
Merge pull request #9223 from robertomiranda/fix-bigdecimal-typecast

Fix BigDecimal Typecast on 1.8.7
Fix issue with attr_protected where malformed input could circumvent
protection

Fixes: CVE-2013-0276

Conflicts:
	activemodel/lib/active_model/attribute_methods.rb
	activerecord/test/cases/mass_assignment_security_test.rb
fix serialization vulnerability
Merge pull request #9126 from mbarb0sa/bugfix/json-decoding-in-rails-3-0-stable

fixed failing JSON decoding in rails 3-0-stable
Merge branch '3-0-sec' into 3-0-stable

* 3-0-sec:
  fix serialization vulnerability
  Fix issue with attr_protected where malformed input could circumvent protection
Revert "Merge pull request #9126 from mbarb0sa/bugfix/json-decoding-in-rails-3-0-stable"

This reverts commit 360af4eba60823c978bd5791d40f85c7c7739c80, reversing
changes made to f93d04677066b74ebb69f57028586126fc19228c.