GitLab

Issue #2228341 by sun, znerol, skipyT, ParisLiakos: Objectify session management functions + remove session.inc.

Issue #2209145 by slashrsm, fgm, chx: Move all path alias SQL queries to a single storage controller.

Issue #1081192 by wojtha, klausi, larowlan, nedjo, Heine: Verify peer on HTTPS if cURL available (but be careful of built-in cert bundles in the codebase).

Issue #2054011 by amateescu, pwolanin, dawehner, YesCT, tim.plunkett, blueminds, Berdir, das-peter, effulgentsia: Implement built-in support for internal URLs.

Issue #2224777 by pwolanin, dawehner: Unlimited allowed length of path in menu router allows DoS attack on Drupal 8.

Issue #2180109 by damiankloip, dawehner, ParisLiakos, joelpittet, MartijnBraam, Xano: Change the current_user service to a proxy.

Issue #2120235 by dawehner, YesCT: Regression: routing / tabs / actions / contextual links lack way to attach replacement arguments to UI strings.

Issue #2026431 by YesCT, dawehner, Crell: Make ContentNegotiation a 'internal' service, used only by the router, so that core or contrib can implement real negotiation.

Issue #2158003 by Wim Leers, msonnabaum, effulgentsia, moshe weitzman: Remove Block Cache API in favor of blocks returning #cache with cache tags.

Issue #1316692 by tim.plunkett, dawehner: Convert hook_admin_paths() into declarative properties on routes.

Issue #2080823 by alexpott, swentel, Wim Leers: Create API to discover content or config entities' soft dependencies and use this to present a confirm form on module uninstall.

Issue #2155635 by Berdir, tim.plunkett, dawehner: Allow plugin managers to opt in to cache clear during module install.

Issue #2103621 by mondrake | fietserwin: Move GD logic from ImageInterface to toolkit, tie toolkit instance to Image instance, toolkits should no longer be instantiated separately.

Issue #2053153 by tim.plunkett, dawehner, damiankloip, aspilicious: Allow contrib modules to provide plugins on behalf of optional modules.

Revert "Issue #2201919 by damiankloip: Replace drupal_get_hash_salt() with direct Settings call in CsrfTokenGenerator."

This reverts commit aad87a80.

Issue #2201919 by damiankloip: Replace drupal_get_hash_salt() with direct Settings call in CsrfTokenGenerator.

Issue #2113169 by damiankloip, Xano, sun, catch: Memory backend defined as a service in core.services.yml.

Issue #2147153 by dawehner, alexpott, Xano: Replace the last instance of $_GET/$_POST; Create a special exception listener / exception controller which allows to use POST requests.