Issue #2921133 by quietone, VladimirAus, xjm, ankithashetty, longwave, Prem Suthar, smustgrave, benjifisher, AaronMcHale: Remove "Please" from the codebase

Issue #2707291 by Utkarsh_33, lauriii, darvanen, samuel.mortenson, hooroomoo, komalk, narendraR, Vidushi Mehta, sasanikolic, droplet, smustgrave, yoroy, Bcwald, kostyashupenko, penyaskito: Disable body-level scrolling when a dialog is open as a modal

Issue #2662330 by Utkarsh_33, lauriii, hooroomoo, bnjmnm, tim.plunkett, Alan D., smustgrave, catch, mrweiner: Machine name generation is way too slow

Issue #3256642 by mondrake, daffie, yogeshmpawar, alexpott, tmaiochi, quietone, larowlan, catch: Introduce database driver extensions and autoload database drivers' dependencies

Issue #3358514 by poker10, mcdruid, smustgrave: Make phpinfo on the admin status report configurable

Issue #3227354 by JeroenT, bnjmnm, Wim Leers, jungle, VladimirAus, lauriii, RenatoG, nmangold, Gábor Hojtsy, el7cosmos, catch, mandclu, freelock, ckrina, witeksocha, Reinmar: Add support for ckeditor5-autoformat

SA-CORE-2023-005 by benjifisher, Heine, cmlara, mlhess, larowlan, David_Rothstein, xjm, Wim Leers, DamienMcKenna, effulgentsia, pwolanin, mcdruid, poker10, jenlampton, longwave, kim.pepper, alexpott, drumm

Issue #3027639 by catch, jonhattan, ankithashetty, Lal_, voleger, beunerd, cmlara, yogeshmpawar, Jose Reyero, drfuzetto, MiguelArber, smustgrave, longwave, Berdir, leandro713, Ambient.Impact, olli, amitaibu: Make css/js optimized assets path configurable

Issue #3336463 by sleitner, recrit, catch: Htaccess rewrite rules for gzipped CSS and JavaScript aggregates never match

Issue #3311406 by Anybody, Grevil, nod_: .htaccess ExpiresDefault (2W) is much too low. Should be ~1Y

Issue #3328454 by xjm, Bhanu951, jidrone, smustgrave: Replace most strpos() !== FALSE or === FALSE with str_contains()

Issue #3107548 by tunic, roderik, nicrodgers, greggles, anita_novicell, larowlan: Enhance hash_salt documentation in default.settings.php

Issue #3150614 by pfrenssen, cilefen, murilohp, FinnishFlash, mpp, andypost, ranjith_kumar_k_u, vagelis-prokopiou, rpayanm, tsplash, blazey, Winn, znerol, alexpott, Berdir, mxr576, catch, anagomes: Set SameSite on session cookies

Revert "Issue #3150614 by pfrenssen, cilefen, murilohp, FinnishFlash, mpp, andypost, ranjith_kumar_k_u, vagelis-prokopiou, blazey, tsplash, Winn, alexpott, Berdir, mxr576: Set SameSite on session cookies"

This reverts commit a3bddae4.

Issue #3150614 by pfrenssen, cilefen, murilohp, FinnishFlash, mpp, andypost, ranjith_kumar_k_u, vagelis-prokopiou, blazey, tsplash, Winn, alexpott, Berdir, mxr576: Set SameSite on session cookies

Issue #3317265 by ressa, smustgrave: Use immediately visible and functioning String override example

Issue #3333281 by MustangGB, smustgrave, xjm: Give trusted host configuration hint in default.settings.php

Issue #2854817 by Liam Morland, longwave, alexpott, JoshaHubbers, effulgentsia, alex-b, Mile23, thalles, mr.baileys, Wim Leers, xjm: Duplicate X-Content-Type-Options headers both with the value nosniff

Issue #3191389 by anmolgoyal74, greggles, larowlan, mcdruid, pwolanin, brayfe: File Inclusion issue security hardening

Issue #3327115 by Eric_A, alexpott, xjm, longwave, pandaski: .htaccess rules broken since yarn.lock got added

Issue #3326896 by longwave, lauriii, Wim Leers, effulgentsia, catch, xjm: Update CKEditor 5 to 35.4.0

Issue #3283802 by Wim Leers, bnjmnm, effulgentsia, mgifford: Update CKEditor 5 to 35.3.2 to fix voice control/IME on some platforms

Issue #3260401 by idebr, Spokje, Akram Khan, mcdruid, longwave, alexpott: Google is abandoning FLoC - so remove the header

Issue #3320370 by dk-massive, andypost, longwave: Update to tabbable v6.0.1 to fix bug with scoped headers