Issue #3431452 by godotislate, smustgrave, alexpott: Rename RenderElement and FormElement plugin abstract classes to RenderElementBase and FormElementBase

Issue #3320467 by Liam Morland, nicrodgers, smustgrave, andypost, jonnyhocks, alexpott: form_build_id is a hidden input field and therefore should not have the autocomplete attribute

Issue #3431285 by mondrake, alexpott, jidrone, xjm, longwave: Replace func_get_args with variable-length argument in FormBuilder

Issue #3109970 by znerol, andypost, Prashant.c, daffie, Wim Leers, dww, catch: Convert uses of $_SESSION in forms and batch

Issue #3395776 by catch, kristiaanvandeneynde, Wim Leers, Fabianx, larowlan: Make POST requests render cacheable

Issue #3221798 by larowlan, pradhumanjain2311, alexpott, tim.plunkett, tunic, Eric_A, longwave, FatherShawn: Remove stale processing and reference to form_type_TYPE_value

Issue #3219667 by quietone, ravi.shankar, longwave, smustgrave: Fix spelling for words used once, beginning with 't' -> 'z', inclusive

Issue #3268835 by quietone, smustgrave, ravi.shankar, xjm, borisson_, catch: Fix method comments in non tests for Drupal.Commenting.DocComment.ShortSingleLine

Issue #3328443 by xjm, rpayanm, alexpott, catch, longwave: Replace most strpos() === 0 or !== 0 with str_starts_with()

Issue #2965929 by jhedstrom, dimitriskr, kkalashnikov, sun, Lendude, DanielVeza: DX: Insufficient error message "The form argument is not a valid form."

(cherry picked from commit 80c94265)

SA-CORE-2022-003 by ciss, xjm, larowlan, benjy, mcdruid, jenlampton, quicksketch, Fabianx, effulgentsia

(cherry picked from commit 8fabbc61)

Issue #3222251 by bbrala, longwave: [November 8, 2021] Replace all isset constructs with the null coalescing operator

Issue #3219541 by tunic, longwave: Remove redundant call $this->requestStack->getCurrentRequest() in FormBuilder::buildForm

Issue #3209617 by longwave, daffie, catch: [Symfony 6] Symfony\Component\HttpFoundation\RequestStack::getMasterRequest() is deprecated, use getMainRequest() instead

Issue #3161983 by catch, longwave, Pooja Ganjage, sanjayk, daffie, Kristen Pol, dww, Gábor Hojtsy: [Symfony 6] Update EventDispatcherInterface type hints in constructors

Revert "Issue #3161983 by Pooja Ganjage, sanjayk, catch, longwave, daffie, dww, Gábor Hojtsy: [Symfony 6] Update EventDispatcherInterface type hints in constructors"

This reverts commit a9cee683.

Issue #3161983 by Pooja Ganjage, sanjayk, catch, longwave, daffie, dww, Gábor Hojtsy: [Symfony 6] Update EventDispatcherInterface type hints in constructors

SA-CORE-2020-009 by _nzr_, markwittens, nathandentzau, marcaddeo, janusman, larowlan, David_Rothstein, Wim Leers, vijaycs85, mcdruid, Heine, pandaski, xjm, tim.plunkett

(cherry picked from commit 284f58f0)

Issue #3040274 by sarvjeetsingh, rishabhthakur, theotherlondon, alexpott, kkalaskar, kiamlaluno, amarphule, gringoinc, ravi.shankar, davidhernandez, tim.plunkett: Fix grammar, spelling, and style of the code comments in FormBuilder::prepareForm()

SA-CORE-2020-004 by samuel.mortenson, DorTumarkin, greggles, xjm, larowlan, webchick, pwolanin, dawehner, mcdruid, alexpott, dsnopek

(cherry picked from commit 3999b8f6)

Issue #1831560 by acbramley, CRZDEV, mvwensen, fago, David_Rothstein, harsha012, Lendude, mrinalini9, Devin Carlson, borisson_, Gábor Hojtsy: Remove Html::resetSeenIds() call during form processing

Issue #3070604 by christinlepson, joachim, jhodgdon: badly named and documented parameter for FormBuilder::buildForm()

Issue #2966327 by alexpott, mcdruid, dww, dsnopek, catch, pwolanin, larowlan, tim.plunkett, Berdir, Sam152: Limit what can be called by a callback in render arrays to reduce the risk of RCE

Issue #3000057 by kim.pepper, andypost, claudiu.cristea, voleger, dww, Berdir, larowlan: Deprecate drupal_set_time_limit() and file_upload_max_size() and move to Environment component

Issue #2829185 by vaplas, Jo Fitzgerald, anmolgoyal74, chipway, gaurav.kapoor, mark_fullmer, amit.drupal, cilefen, longwave, xjm, wturrell, anavarre: Fix spelling errors in Drupal core comments

Issue #2572613 by Malevi4, idebr, pfrenssen, Mile23, RajeevK: Fix 'Drupal.Array.Array.CommaLastItem' coding standard

Issue #2469799 by Adita, Xano, Girish-jerk: improve documentation and type hinting of FormValidatorInterface and FormValidator

Issue #2596597 by hchonov, sardara, claudiu.cristea, pfrenssen: [regression] Soft reload does not clean up user inputs like in D7 (Firefox only)

Issue #2776975 by joelpittet, dawehner, tim.plunkett, xjm, pfrenssen: March 3, 2017: Convert core to array syntax coding standards for Drupal 8.3.x RC phase

Issue #2569119 by pwolanin, marvin_B8, jhedstrom, csheltonlcm, alexpott, dawehner, Fabianx, catch:  Use Crypt::hashBase64(), not hash('crc32b') or sha1 for placeholder tokens

Issue #2699489 by catch, tim.plunkett: FormBuilder $ajax_form_request check does not check which AJAX form is being requested