Merge pull request #1472 from padrino/fix-incorrect-params2

Skip the `:path_traversal` protection, fixes #1391.

padrino-core/lib/padrino-core/application.rb

@@ -206,7 +206,7 @@ def default_paths!
       end
 
       def default_security!
-        set :protection, true
+        set :protection, :except => :path_traversal
         set :authentication, false
         set :sessions, false
         set :protect_from_csrf, false