Issue #3427178 by mondrake, longwave: Replace calls to ::expectWarning*() from Drupal\Tests\Core\Security\DoTrustedCallbackTraitTest

Issue #3328454 by xjm, Bhanu951, jidrone, smustgrave: Replace most strpos() !== FALSE or === FALSE with str_contains()

Issue #3210486 by Spokje, longwave, andypost, alexpott: Remove typo3/phar-stream-wrapper and associated code

Issue #3252406 by Spokje, longwave, andypost: Mark class \Drupal\Core\Security\PharExtensionInterceptor as internal

Issue #3222769 by bbrala, alexpott, longwave, Matroskeen: [November 8, 2021] Replace all list (array destructuring) assignment to the array syntax

Issue #3213572 by larowlan, phenaproxima, kim.pepper, xjm, tim.plunkett: #date_time_callbacks and #date_date_callbacks bypass the TrustedCallbackInterface protections

Issue #3151093 by dww, cburschka, Manisha111, alexpott, longwave: Replace use of whitelist/blacklist in \Drupal\Core\Security\RequestSanitizer and its test

Issue #3150471 by durgeshs, joachim: incorrect constant in docs for DoTrustedCallbackTrait::doTrustedCallback()

Issue #3086374 by mondrake, alexpott, joseph.olstad, Spokje, ravi.shankar, Gábor Hojtsy, heddn, Charlie ChX Negyesi, amateescu: Make Drupal 9 compatible with PHP 7.4

Issue #2966327 by alexpott, mcdruid, dww, dsnopek, catch, pwolanin, larowlan, tim.plunkett, Berdir, Sam152: Limit what can be called by a callback in render arrays to reduce the risk of RCE

Issue #3041983 by yogeshmpawar, idebr, pifagor, klausi: Fix unused imports and update Coder to 8.3.4

Issue #3026386 by dsnopek, samuel.mortenson, xjm, ydahi, alexpott, Fabianx, kferencz91, littlepixiez, greggles, cilefen: Drush fatal error after upgrading to 8.6.6, 8.5.9, or 7.62: PHP Fatal error:  Uncaught TYPO3PharStreamWrapperException

(cherry picked from commit a5613263)

SA-CORE-2019-002 by greggles, cashwilliams, EclipseGc, larowlan, samuel.mortenson, alexpott, tedbow, effulgentsia, Fabianx, xjm, mlhess

(cherry picked from commit fe32f779)

SA-CORE-2018-006 by alexpott, attilatilman, bkosborne, catch, bonus, Wim Leers, Sam152, Berdir, Damien Tournoud, Dave Reid, Kova101, David_Rothstein, dawehner, dsnopek, samuel.mortenson, stefan.r, tedbow, xjm, timmillwood, pwolanin, njbooher, dyates, effulgentsia, klausi, mlhess, larowlan

SA-CORE-2018-004 by David_Rothstein, alexpott, larowlan, Heine, Pere Orga, tim.plunkett, mlhess, xjm, Jasu_M, drumm, cashwilliams, quicksketch, dawehner, pwolanin, samuel.mortenson

(cherry picked from commit bb6d3966)

SA-CORE-2018-002 by Jasu_M, samuel.mortenson, David_Rothstein, xjm, mlhess, larowlan, pwolanin, alexpott, dsnopek, Pere Orga, cashwilliams, dawehner, tim.plunkett, drumm