don't log errors when all is fine
Small Action View Overview edits [ci skip]

Some small grammar and readability edits
Define the Duration#instance_of? method

Since Duration is extending from ProxyObject which extends itself from
BasicObject, the Duration object doesn't respond to the #instance_of?
method. Thus, the #method_missing hook get triggered, delegating the
method to its `value` attribute.

However, Rubinius' #eql? definition relies on #instance_of?, thus this
will equal to true with a Fixnum (since its `value` attribute is a
Fixnum) while it should not.

The previous behavior was wrong anyway, no matter the implementation.
Grammar pass

[ci skip]

Add improvements from @eileencodes [skip ci]
Move TimeHelperTest to TimeTravelTest from `as/test_test.rb`
Fix the rails-dom-testing dependecy
Merge pull request #16564 from zzak/move_time_travel_test

Move TimeHelperTest to TimeTravelTest from `as/test_test.rb`
Bump ActiveJob's GlobalID dep to 0.2.3+ to fix Railties tests
Use released rails-deprecated_sanitizer
Use released rails-html-sanitizer
Remove git dependecies
Add TODO note about the gems missing release
Move date and time requires to time_travel_test, also include
'abstract_unit'.

cc #16564
We always get the value so no need to check nil or Hash
[ci skip] Added documentation for belongs_to scope parameter
Mention web-console in 4.2 release notes

Mention the web-console inclusion in the default Gemfile in the Release
notes and the railties changelog. We can eventually mention it in the
upgrade guide, if needed.

[ci skip]
Merge pull request #16475 from tomkadwill/has_many_scope_documentation

[ci skip] Added documentation for belongs_to scope parameter
Merge pull request #16561 from gsamokovarov/mention-web-console-in-changelog

Mention web-console in 4.2 release notes
Require rack/utils
Auth token mask from breach-mitigation-rails gem

This merges in the code from the breach-mitigation-rails gem that masks
authenticity tokens on each request by XORing them with a random set of
bytes. The masking is used to make it impossible for an attacker to
steal a CSRF token from an SSL session by using techniques like the
BREACH attack.

The patch is pretty simple - I've copied over the [relevant
code](https://github.com/meldium/breach-mitigation-rails/blob/master/lib/breach_mitigation/masking_secrets.rb)
and updated the tests to pass, mostly by adjusting stubs and mocks.