Security: HTTP GET Bypassed Spam Protection
Apparently, the form_spam_protect plugin only works with HTTP POST, not GET.
Unsafe operations (save and file-upload) should be POSTs anyway.
Fixed.

Also, two broken tests fixed. Only two Unit Tests now fail: both are minor bugs in XHTMLDiff.

app/controllers/file_controller.rb

app/controllers/wiki_controller.rb

test/fixtures/sessions.yml

test/fixtures/wiki_files.yml

test/functional/file_controller_test.rb

test/unit/page_renderer_test.rb