[BUGFIX release] Reduce read-only calls to meta
[BUGFIX release] Pass meta into watchKey when possible
[BUGFIX release] Reduce even more meta calls by passing it along in other places
[BUGFIX release] Reduce even more meta calls by passing it along in other places (doh, missed one)
[BUGFIX beta] fixed issue with transition.resolvedModels

Already-resolved parent models weren't showing
up in modelFor hook post-refactor

cc @wagenet
[BUGFIX release] finishChains was modifying meta incorrectly
[BUGFIX release] We don't need to call didChange after we've copied
[BUGFIX beta] fix stripping trailing slashes for * routes

Fixes #3234
[BUGFIX beta] Silently fail when disconnecting from an inactive view
[Bugfix beta] improve action without actions hash deprecation warning
Add documentation for Ember.EnumerableUtils.
[BUGFIX beta] Remove false attribute from Ember.View

In IE8 (or older), `jQuery.fn.prop` always update DOM against our
expectation.(This is a jQuery bug but it couldn't fix)
ref: http://bugs.jquery.com/ticket/13558

So the following test is failed due to `view.$().attr('foo')` returns `"false"`.:
* https://github.com/emberjs/ember.js/blob/a449d445/packages/ember-views/tests/views/view/attribute_bindings_test.js#L126

To avoid this issue, `removeAttr` should be called when `null`, `undefined` or `false` is given as value.

But this way contains incompatible changes:

Before:
``` javascript
view.set('checked', false);
view.$().prop('checked'); //=> false
```

After:
``` javascript
view.set('checked', false);
view.$().prop('checked'); //=> undefined
```
[SECURITY CVE-2014-0014] Ensure {{group}} helper escapes properly.

This vulnerability has been assigned the CVE identifier CVE-2014-0014.

In general, Ember.js escapes or strips any user-supplied content before
inserting it in strings that will be sent to innerHTML.  However, we
have identified a vulnerability that could lead to unescaped content being
inserted into the innerHTML string without being sanitized.

When using the `{{group}}` helper, user supplied content in the template
was not being sanitized. Though the vulnerability exists in Ember.js proper,
it is only exposed via the use of an experimental plugin.

In applications that use the `{{group}}` helper, a specially-crafted
payload could execute arbitrary JavaScript in the context of the current
domain ("XSS").

This vulnerability was reported to us by Edward Faulkner of CleriCare.
Many thanks for working with us on the patches and advisory.
[SECURITY CVE-2014-0013] Ensure primitive value contexts are escaped.

This vulnerability has been assigned the CVE identifier CVE-2014-0013.

In general, Ember.js escapes or strips any user-supplied content before
inserting it in strings that will be sent to innerHTML.  However, we have
identified a vulnerability that could lead to unescaped content being inserted
into the innerHTML string without being sanitized.

When a primitive value is used as the Handlebars context, that value is not
properly escaped.  An example of this would be using the `{{each}}` helper to
iterate over an array of user-supplied strings and using `{{this}}` inside the
block to display each string.

In applications that contain templates whose context is a primitive value and
use the `{{this}}` keyword to display that value, a specially-crafted payload
could execute arbitrary JavaScript in the context of the current domain
("XSS").

This vulnerability was discovered by Robert Jackson of DockYard. Many
thanks for working with us on the patches and advisory.
Refactor sanitization into reusable function.
Bump version to v1.4.0-beta.2.
[DOC beta] Document Ember.Route #controllerName and #viewName properties.
Fix a couple of document typos in enumerable
[DOC beta] Document the send method on Ember.ActionHandler
Fix slight documentation typo