Issue #2304949 by mpdonadio, cilefen, znerol, klausi, gaurav.goyal, regilero: Port HTTP Host header DoS fix from SA-CORE-2014-003

Issue #2361681 by Wim Leers: drupal_render(): invert second argument ($is_recursive_call -> $is_root_call) => more strict, better DX/TX.

Issue #2184907 by JeroenT, ParisLiakos, ianthomas_uk, hussainweb, dawehner: Remove uses of drupal_add_http_header and related functions.

Issue #2277103 by tim.plunkett, pwolanin, Wim Leers, dawehner, hotpizzas: Switch Drupal::l() and LinkGenerator to expect a Url object.

Issue #2343651 by xjm, tim.plunkett, Wim Leers, dinarcon, dawehner: Remove most remaining l() calls.

Issue #2062043 by eelkeblok, longwave, rhm50, InternetDevels, alvar0hurtad0, Xano: Replace user_access() calls with $account->hasPermission() in core files.

Issue #2016629 by larowlan, neclimdul, sun, alexpott, jibran, ParisLiakos, donquixote, effulgentsia, msonnabaum: Refactor bootstrap to better utilize the kernel.

Revert "Issue #2016629 by larowlan, neclimdul, sun, alexpott, jibran, ParisLiakos, donquixote, effulgentsia, msonnabaum: Refactor bootstrap to better utilize the kernel."

This reverts commit cda051c4.

Issue #2016629 by larowlan, neclimdul, sun, alexpott, jibran, ParisLiakos, donquixote, effulgentsia, msonnabaum: Refactor bootstrap to better utilize the kernel.

Issue #1289536 by ParisLiakos, RobLoach, Crell, larowlan, fgm, pounard, Pancho, dawehner, scor, tim.plunkett, alexpott, socketwench: Switch Watchdog to a PSR-3 logging framework.

Revert "Issue #1289536 by RobLoach, Crell, Pancho, pounard, socketwench, fgm, dawehner, scor, tim.plunkett, larowlan, ParisLiakos: Switch Watchdog to a PSR-3 logging framework."

This reverts commit ef250ba2.

Issue #1289536 by RobLoach, Crell, Pancho, pounard, socketwench, fgm, dawehner, scor, tim.plunkett, larowlan, ParisLiakos: Switch Watchdog to a PSR-3 logging framework.

Issue #2228341 by sun, znerol, skipyT, ParisLiakos: Objectify session management functions + remove session.inc.

Revert "Issue #2218039 by sun, dawehner: Render the maintenance/install page like any other HTML page."

Broke update.php.

This reverts commit 10b03890.

Issue #2121175 by Codenator, tim.plunkett, cosmicdreams, jayeshanandani, grom358, ianthomas_uk, Xano: Remove usage of drupal_get_form().

Issue #340723 by ParisLiakos, sun, Berdir, glennpratt, Cottser, swentel, alexpott, tstoeckler, Xano, tim.plunkett, BassistJimmyJam | beejeebus: Make modules and installation profiles only require .info.yml files.

Revert "Issue #340723 by ParisLiakos, sun, Berdir, glennpratt, Cottser, swentel, tstoeckler, Xano, tim.plunkett, BassistJimmyJam: Make modules and installation profiles only require .info.yml files."

This reverts commit b4c561d0.

Issue #340723 by ParisLiakos, sun, Berdir, glennpratt, Cottser, swentel, tstoeckler, Xano, tim.plunkett, BassistJimmyJam: Make modules and installation profiles only require .info.yml files.

Issue #2007124 by pplantinga, anirudha_3083, martin107, InternetDevels: Replace theme() with drupal_render() in authorize.php.

Issue #2167109 by Berdir, sun, alexpott, ACF, acrollet, adamdicarlo, Albert Volkman, andreiashu, andyceo, andypost, anenkov, aspilicious, barbun, beejeebus, boombatower, cam8001, chriscalip, chx, cosmicdreams, dagmar, damiankloip, dawehner, deviance, disasm, dixon_, dstol, ebrowet, Gábor Hojtsy, heyrocker, Hydra, ianthomas_uk, japicoder, jcisio, jibran, julien, justafish, jvns, KarenS, kbasarab, kim.pepper, larowlan, Lars Toomre, leschekfm, Letharion, LinL, lirantal, Lukas von Blarer, marcingy, Mike Wacker, mrf, mtift, mtunay, n3or, nadavoid, nick_schuch, Niklas Fiekas, ParisLiakos, pcambra, penyaskito, pfrenssen, plopesc, Pol, Rok Žlender, rvilar, swentel, tim.plunkett, tobiasb, tsvenson, typhonius, vasi1186, vijaycs85, wamilton, webchick, webflo, wizonesolutions, xjm, yched, YesCT, znerol: Remove Variable subsystem.

Issue #1987816 by pdrake, disasm, ParisLiakos, pguillard, vijaycs85, dawehner: Convert system_batch_page() to a new style controller.

Issue #2038135 by RobLoach, donquixote, Crell, ParisLiakos, catch: Use the Composer autoloader to make everything simpler.

Issue #1890878 by corvus_ch, ygerasimov, berenddeboer, Crell, fubhy the cat, effulgentsia: Add modular authentication system, including Http Basic; deprecate global .

Issue #1957154 by joates, ayelet_Cr, xjm | Berdir: Replace calls to drupal_container()->get('module_handler()') service with Drupal::moduleHandler().