rails/rails — pull request #17258 by sjzhu (2014-10-14 20:40:07+00:00)
Title: backport fix for CVE-2014-0130 (directory traversal)

Backporting a patch.

PTAL

/to: @jeffyip