Revert "Merge pull request #9210 from dylanahsmith/3-0-mysql-quote-numeric"

This reverts commit 663c9a6335b39f3b63d32619cbb11bece248f982, reversing
changes made to 10513d2eb9892c9e2bfe0ae04c9c16165c5c1544.
fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855]
JDOM XXE Protection [CVE-2013-1856]

Conflicts:
	activesupport/test/xml_mini/jdom_engine_test.rb
fix protocol checking in sanitization [CVE-2013-1857]

Conflicts:
	actionpack/lib/action_controller/vendor/html-scanner/html/sanitizer.rb
Use mail 2.5
use the decimal HTML escape code for single quotes instead of the hex one so webkit-based browsers properly translate the code in form fields