Remove call to Kernel#gem
backport String#encoding_aware? and String#blank? encoding fixes from rails3
ignore "invalid byte sequence in UTF-8" from String#=~
backport patches for CVE-2013-0333

https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/1h2DR63ViGo
short-circuit String#blank? when string is empty
Allow content_tag options to take an array [#1741 state:resolved] [rizwanreza, Nick Quaranto]

Example:
  content_tag('p', "limelight", :class => ["song", "play"])
  # => <p class="song play">limelight</p>

Signed-off-by: Pratik Naik <pratiknaik@gmail.com>
url_for no longer escapes HTML, the :escape option is also gone

Rationale: url_for is just a path/URL generator, it is the responsability of the caller to escape conveniently HTML needs it, JavaScript needs different escaping, a text mail needs no escaping at all, etc.

Backported to 2.3. Conflicts:
	actionpack/CHANGELOG
	actionpack/lib/action_view/helpers/url_helper.rb
	actionpack/test/template/url_helper_test.rb
fix boot on 1.9.3-p385

  rails-2.3.14.github14/lib/initializer.rb:906:in `replace': can't modify frozen String (RuntimeError)
  from gems/rails-2.3.14.github14/lib/initializer.rb:906:in `set_root_path!'
  from gems/rails-2.3.14.github14/lib/initializer.rb:860:in `initialize'
  from gems/rails-2.3.14.github14/lib/initializer.rb:110:in `new'
  from gems/rails-2.3.14.github14/lib/initializer.rb:110:in `run'
  from github/config/environment.rb:22:in `<top (required)>'
s/escape_once/html_escape/, since html safety is the contract that now says whether something has to be escaped

Conflicts:
	actionpack/CHANGELOG
	actionpack/lib/action_view/helpers/form_tag_helper.rb
	actionpack/lib/action_view/helpers/url_helper.rb
	actionpack/test/template/url_helper_test.rb
@loaded is defined in initialize, so we should not need this

Conflicts:
	activerecord/lib/active_record/associations/association_proxy.rb
just call methods on return value of `load_target`
just use return value of load_target
fix for ruby 2.0

this was manifesting as:

  NoMethodError: undefined method `insert_record' for #<Array:0x007fb0ca5fa7f8>
      gems/activerecord-2.3.14.github17/lib/active_record/associations/association_proxy.rb:149:in `send'

see http://tenderlovemaking.com/2012/09/07/protected-methods-and-ruby-2-0.html
fix default to_a deprecation warnings

  lib/active_record/associations/association_proxy.rb:215: warning: default `to_a' will be obsolete
fix protocol checking in sanitization [CVE-2013-1857]

Conflicts:
	actionpack/lib/action_controller/vendor/html-scanner/html/sanitizer.rb
	actionpack/test/controller/html-scanner/sanitizer_test.rb
fixing attr_protected CVE-2013-0276
Bump to 2.3.18

Missed the AM bump

Fix AR

Conflicts:
	actionpack/Rakefile
Need to check for protected methods in i18
Apply patch to allow for fetching of cached +false+ values.

Rails bug report:
https://rails.lighthouseapp.com/projects/8994/tickets/3482

Patch source:
https://rails.lighthouseapp.com/projects/8994/tickets/3482/a/323835/dont-interpret-false-as-cache-miss.patch
Make any adapter containing 'postgresql' use `psql`