Only accept actions without File::SEPARATOR in the name.

This will avoid directory traversal in implicit render.

Fixes: CVE-2014-0130
Preparing for 4.1.1 release
Merge branch '4-1-sec' into 4-1-stable

Conflicts:
	actionmailer/CHANGELOG.md
	actionpack/CHANGELOG.md
	actionview/CHANGELOG.md
	activemodel/CHANGELOG.md
	activerecord/CHANGELOG.md
	activesupport/CHANGELOG.md
	guides/CHANGELOG.md
	railties/CHANGELOG.md