Fix XSS issue in poll questions

closes #5274
Merge branch 'hotfix/0.4.1.1'
bump Rails to fix CVE-2014-7818
jd.com customizations.