Issue #2966327 by alexpott, mcdruid, dww, dsnopek, catch, pwolanin, larowlan, tim.plunkett, Berdir, Sam152: Limit what can be called by a callback in render arrays to reduce the risk of RCE

Issue #3052492 by amateescu, plach, alexpott: ViewsEntitySchemaSubscriber should not make an entity update fail if a view cannot be resaved

Issue #2935256 by Jo Fitzgerald, voleger, kim.pepper, ibustos, Yogesh Pawar, catch, jibran: Remove all usages of drupal_get_message and drupal_set_message in modules

Issue #2776975 by joelpittet, dawehner, tim.plunkett, xjm, pfrenssen: March 3, 2017: Convert core to array syntax coding standards for Drupal 8.3.x RC phase

Issue #2644598 by mglaman, bojanz, vasike: Views forms can't be used multiple times on the same page

Issue #2492839 by joelpittet, mikeker, dawehner, lauriii, plach, Fabianx, olli: Views replacement token bc layer allows for Twig template injection via arguments

Issue #2328411 by dawehner, geerlingguy, herom: Convert all permissions to yml files and permission callbacks.

Issue #2049207 by dlu, blakehall, janstoeckler, ramlev, Moderate | Cottser: Replace .tpl.php with .html.twig in documentation.

Issue #2100329 by cosmicdreams: Use \Drupal instead of Drupal to make IDEs and static code analyse tools happy.

Issue #2002910 by diarmy, toddtomlinson, dbcollies, heddn: Rename Views method get_field() to getField().

Issue #1828642 by tim.plunkett, xjm, dawehner: Convert as many Views tests as possible to DrupalUnitTestBase.

Issue #1792844 by tim.plunkett: Change more public properties to protected in ViewExecutable and ViewStorage.