SA-CORE-2017-001 by alexpott, benjy, Berdir, casey, cilefen, dawehner, Heine, klausi, larowlan, Mixologic, mlhess, pwolanin, samuel.mortenson, Wim Leers, xjm, YesCT

(cherry picked from commit 98e6f462)

Revert "Issue #2763787 by nerdstein, rlhawk, slasher13, therealssj, TravisCarden: Upgrade random_compat to latest version"

This reverts commit 7feb65ba.

Issue #2763787 by nerdstein, rlhawk, slasher13, therealssj, TravisCarden: Upgrade random_compat to latest version

(cherry picked from commit 7a617f2e1dca3d1c58313c1b7c2d8385ef135060)

Issue #1869548 by dawehner, jeqq, dmouse, slasher13, damiankloip, alexpott, nod_, AlxVallejo, chr.fritsch, yanniboi, effulgentsia, dixon_, -enzo-, Wim Leers, Crell, andypost, catch, Damien Tournoud, kim.pepper, linclark: Opt-in CORS support

Revert "Issue #1869548 by dawehner, jeqq, dmouse, damiankloip, nod_, AlxVallejo, chr.fritsch, yanniboi, effulgentsia, dixon_, -enzo-, Wim Leers, Crell, Damien Tournoud, andypost, kim.pepper, linclark, catch: Opt-in CORS support"

This reverts commit f2b71152.

Issue #1869548 by dawehner, jeqq, dmouse, damiankloip, nod_, AlxVallejo, chr.fritsch, yanniboi, effulgentsia, dixon_, -enzo-, Wim Leers, Crell, Damien Tournoud, andypost, kim.pepper, linclark, catch: Opt-in CORS support

SA-CORE-2016-003 by alexpott, Michael Dowling, mlhess, xjm, Pere Orga, dawehner, greggles, coltrane, pwolanin, larowlan

Issue #2712637 by klausi, jibran, dawehner, simensen, JeroenT: Update stack/builder for Symfony 3 compatibility

Issue #2638856 by bojanz, webflo, SiliconMind: Unable to install modules with core dependencies via composer

Issue #2678574 by dawehner: Symfony 2.8 requirements change: required PHP "iconv" extension is nowhere documented

Issue #2550519 by klausi, nullkernel, cweagans, alexpott, pwolanin, neclimdul: Crypt::randomBytes() doesn't actually return cryptographically secure random bytes

Issue #2600176 by alexpott, dawehner, tim.plunkett: Step 1.875: Include the PhantomJS Mink driver for real

Issue #2380389 by webflo, Mile23, davidwbarratt, timmillwood, hussainweb, tstoeckler, bojanz, yched, MKorostoff, alexpott, webchick: Use a single vendor directory in the root

Issue #2571817 by Cottser, hussainweb: Remove race condition handling in TwigEnvironment::loadTemplate(), it's fixed upstream now

Issue #2568171 by Cottser, dawehner, hussainweb, Wim Leers, cilefen, znerol: Upgrade to Twig 1.22 and implement our own cache class

Issue #2568085 by plach, alexpott, dawehner, Berdir: Lock Twig on ~1.21.2 until we are able to upgrade to 1.22.0

Issue #2444615 by borisson_, neclimdul, jibran, dawehner, jhedstrom, Fabianx: Move testing packages to require-dev in composer.json

Issue #2546618 followup by plach: Document that we don't depend on the Symfony Translation component.