Issue #2304969 by pwolanin, cilefen, Berdir, Devin Carlson, klausi: Fixed Port private files access bypass from SA-CORE-2014-003.
Issue #2238981 by dawehner, effulgentsia, tim.plunkett: Change controllers to receive route parameters in their signature rather than via $request->attributes.