GitLab

Issue #2571695 by dawehner, plach, stefan.r, jaredsmith, lauriii, YesCT, xjm, catch, alexpott, joelpittet, Ryan Weal, Sutharsan, subhojit777, justAChris, nlisgo, effulgentsia, rpayanm, larowlan, chx, geertvd: Remove !placeholder and unsafe string return from SafeMarkup::format()

Issue #2489024 by lauriii, Fabianx, Gábor Hojtsy, Cottser, dawehner, zeropx: Arbitrary code execution via 'trans' extension for dynamic twig templates (when debug output is on)

Issue #2464045 by fgm: Move twig_render_var/twig_drupal_escape_filter to TwigExtension, inject the renderer in Twig extension and inline render() / show() function instead of calling it

Issue #2309737 by rpayanm, hussainweb, max-kuzomko, herom, millerbennett, ianthomas_uk, quietone, Sutharsan, sumitmadan, toddmbloom: Remove deprecated format_plural usage

Issue #1825952 by Fabianx, joelpittet, bdragon, heddn, chx, xjm, pwolanin, mikey_p, ti2m, bfr, dags, cilefen, scor, mgifford: Turn on twig autoescape by default

Issue #2049241 by Mark Carver, penyaskito, Gábor Hojtsy: Change notice: Add support for language options to the Twig {% trans %} tag extension.

Issue #1927584 by Mark Carver, ezeedub, drupalninja99, Cottser, geoffreyr, John Bickar, jenlampton, penyaskito: Add support for the Twig {% trans %} tag extension.