Explicit route test class

shows the class that the test must extend in order to have the assert_routing method available
FileHandler should not be called for files outside the root

FileHandler#matches? should return false for files that are outside the
"root" path.
If Rails is not defined, check ENV["RAILS_ENV"] and ENV["RACK_ENV"].

This fixes a regression introduced by 6cc03675d30b58e28f585720dad14e947a57ff5b.

ActiveRecord, if used without Rails, always checks the "default_env" environment. This would be OK, except that Sinatra also supports environments,
and it runs with {RACK|RAILS}_ENV=production. This patch adds a fallback to RAILS_ENV and RACK_ENV (and ultimately default_env) if Rails.env doesn't exist.
Remove redundant `to_s` in interpolation
Merge branch 'master-sec'

* master-sec:
  FileHandler should not be called for files outside the root
Merge pull request #17440 from claudiob/remove-yet-another-redundant-to-s

Remove redundant `to_s` in interpolation
Use released arel
Prepare for 4.2.0.beta4 release
[ci skip] fix incorrect key in Active Support Instrumentation guide
Merge pull request #17451 from y-yagi/fix_asi_guide

[ci skip] fix incorrect key in Active Support Instrumentation guide
Do not package the guides output

Fixes #17455
Don't require calculations to be aliased to a column

Arel has changed so that `.sum` no longer aliases `SUM(the_column)` to
`sum_id`. This means the type returned by the adapter will be at the key
`"SUM(the_column)"`. Longer term, we should eventually be able to retain
type information from the AR::Base subclasses used in joined queries
Rename `default_attributes` to `_default_attributes`

It is internal use only. This is to avoid conflicting with users' method
names. Fixes #17458
Add masked authenticity token section, details on finder options, misc typos [ci skip]
Merge pull request #17460 from hbriggs/master

Masked authenticity token section, finder options details, misc typos [ci skip]
Treat strings greater than int max value as out of range

Sufficiently large integers cause `find` and `find_by` to raise
`StatementInvalid` instead of `RecordNotFound` or just returning `nil`.
Given that we can't cast to `nil` for `Integer` like we would with junk
data for other types, we raise a `RangeError` instead, and rescue in
places where it would be highly unexpected to get an exception from
casting.

Fixes #17380
Merge pull request #17459 from sgrif/sg-find-by-large-numbers

Treat strings greater than int max value as out of range
Honor public/private in ActionView::Helpers::Tags::Base#value

* use public_send instead of send to avoid calling private
  methods in form helpers
Use public_send for form tags
Improve test of private properties of objects in form tags