Merge branch 'master' of https://github.com/OWASP/railsgoat

Gemfile

@@ -96,3 +96,6 @@ gem 'mailcatcher'
 #  # bundle exec rake doc:rails generates the API under doc/api.
 #  gem 'sdoc', require: false
 #end
+
+#For Rails 4.2
+gem 'responders'

Gemfile.lock

@@ -247,6 +247,8 @@ GEM
     rb-inotify (0.9.7)
       ffi (>= 0.5.0)
     ref (2.0.0)
+    responders (2.1.2)
+      railties (>= 4.2.0, < 5.1)
     rspec (2.99.0)
       rspec-core (~> 2.99.0)
       rspec-expectations (~> 2.99.0)
@@ -371,6 +373,7 @@ DEPENDENCIES
   rails (= 4.2.6)
   rake (= 10.5.0)
   rb-fsevent
+  responders
   rspec-rails (= 2.99.0)
   sass-rails
   simplecov

app/views/sessions/new.html.erb

@@ -7,7 +7,7 @@
     try {
       var hashParam = location.hash.split("#")[1];
       var paramName = hashParam.split('=')[0];
-      var paramValue = hashParam.split('=')[1];
+      var paramValue = decodeURIComponent(hashParam.split('=')[1]);
       document.write("<OPTION value=3>" + paramValue + "</OPTION>");
     } catch(err) {
     }