Issue #2315255 by Dave Reid: Fixed Xss::split() fails on custom HTML elements with dashes in the name.
Issue #697760 by sun: Replace getInfo() in tests with native phpDoc + annotations (following PHPUnit).
Issue #2089433 by ianthomas_uk, grom358, herom, thedavidmeister, visabhishek, longwave, Sweetchuck: Remove uses of deprecated XSS filter functions.
Issue #2099741 by Wim Leers, wwalc, mr.baileys, eaton, dstol, nod_, effulgentsia: Protect WYSIWYG Editors from XSS Without Destroying User Data.
Issue #2010024 by damiankloip, dawehner, ParisLiakos: Move url related functions to a new Url component.