use the decimal HTML escape code for single quotes instead of the hex one so webkit-based browsers properly translate the code in form fields
Fix the tests related with single quotes being escaped

Closes #9144
Fixes #9145
Docs: Fixed bad exists? documentation.

Base#exists? does not actually take options like finder methods. Trying
to use what the documentation suggests will return a PG error because it
will look for a column named 'conditions'.

I changed the documentation to reflect how the exists? method actually
works.
Merge pull request #9194 from kwstannard/2-3-stable

Docs: Fixed bad exists? documentation.
fixing attr_protected CVE-2013-0276
fix serialization vulnerability
bumping to 2.3.17
Update activesupport/lib/active_support/core_ext/time/calculations.rb

Just maintaining the coherence with other methods, since everything has "at_" as prefix.
Merge pull request #9251 from Davidslv/patch-1

Add alias to maintain coherence with other methods, in end_of_day
Revert "Merge pull request #9251 from Davidslv/patch-1"

This reverts commit d6adcb4ed35b5626780f7e6130631fe2dfe2ac43, reversing
changes made to 2e4aa39ee6cd56b8d544fda01670f5a48548f13e.

Reason: merged to unmaintained branch.
Merge branch '2-3-sec' into 2-3-stable

* 2-3-sec:
  bumping to 2.3.17
  fix serialization vulnerability
  fixing attr_protected CVE-2013-0276
Merge remote-tracking branch 'rails/2-3-stable' into staging