CVE-2020-8151: Information disclosure issue in Active Resource

The vulnerability stems from improper URL encoding in ID parameter handling. The commit diff shows a critical change in lib/active_resource/base.rb where URI.parser.escape was replaced with URI.encode_www_form_component. The original method's encoding behavior allowed path traversal (e.g., '../') and special characters (e.g., '?') to bypass URL structure constraints, enabling unauthorized data access. The added test cases in finder_test.rb explicitly validate these attack scenarios, confirming the function's role in the vulnerability.