Pajk/rails-restapi — pull request #20 by iNecas (2012-06-05 15:23:07+00:00)
Title: security fix: using cache might expose files from the file system

Due to request params not being sanitized it was possible to request any file
from file system when using appropriate path, e.g.:

/apidoc?resource=../../../config/database&format=yml

The fix sanitizes all the params used for producing the file to be sent.