Issue #2575869 by pwolanin, Wim Leers, JeroenT, dawehner, YesCT: Remove all remaining usage of deprecated UrlGeneratorInterface::generateFromPath() and delete it

Issue #2578561 by tim.plunkett, joelpittet, Bojhan, Fabianx, xjm, cilefen, David_Rothstein, DamienMcKenna: Move "Inline Form Errors" functionality to optional module and restore D7-style form errors by default

Issue #2463567 by borisson_, Wim Leers, Xano: Push CSRF tokens for forms to placeholders + #lazy_builder

Issue #2575615 by alexpott, pwolanin, stefan.r, catch, dawehner, effulgentsia, xjm, David_Rothstein, iMiksu, lauriii, joelpittet: Introduce HtmlEscapedText and remove SafeMarkup::setMultiple() and SafeMarkup::getAll() and remove the static safeStrings list

Issue #2559971 by stefan.r, alexpott, lauriii, nlisgo, plach, dawehner: Make SafeMarkup::format() return a safe string object to remove reliance on a static, unpredictable safe list

Issue #2547531 by sdstyles, mradcliffe: Fix documentation for FormTestBase::getMockForm form id parameter

Issue #2554233 by pwolanin, tim.plunkett, amateescu, dawehner, Wim Leers, catch, effulgentsia, larowlan, Abdullah Hussam, greggles, David_Rothstein: Port Cross-site Request Forgery - Form API fixes from SA-CORE-2015-003 to Drupal 8

Issue #2550981 by alexpott, stefan.r, davidhernandez, joelpittet, Wim Leers, xjm, josephdpurcell, akalata, dawehner: Remove SafeMarkup::set in FormErrorHandler::displayErrorMessages()

Issue #2551335 by alexpott, Wim Leers: Remove unnecessary SafeMarkup usage in tests and clear the static cache before every run

Issue #2526326 by borisson_, Berdir, Wim Leers, Xano: Update CacheableMetadata & AccessResult to use RefinableCacheableDependency(Interface|Trait)

Issue #2539300 by cilefen, tim.plunkett: Remove SafeMarkup::set in \Drupal\Tests\Core\Form\FormCacheTest::testSetCacheWithSafeStrings()

Issue #2502785 by dawehner, effulgentsia, tim.plunkett, amateescu, Fabianx, Wim Leers, catch, dsnopek, EclipseGc, yched, Berdir, larowlan, mondrake, olli: Remove support for $form_state->setCached() for GET requests

Issue #2487600 by dawehner, Wim Leers, fgm: #access should support AccessResultInterface objects or better has to always use it

Issue #1392754 by tss, justAChris, jhodgdon: Comply with new documentation standards for @file for namespaced class files

Issue #2511472 by Wim Leers, Fabianx, dawehner: Refactor all usages of drupal_render()/Renderer::render() that break #2450993

Issue #2500527 by dawehner, tim.plunkett, effulgentsia: Rewrite \Drupal\file\Controller\FileWidgetAjaxController::upload() to not rely on form cache

Issue #2263569 by tim.plunkett, effulgentsia, Fabianx, dawehner, Wim Leers, larowlan: Bypass form caching by default for forms using #ajax.

Issue #1493324 by tim.plunkett, dmsmidt, mgifford, bleen18, davidhernandez, crasx, mparker17, stefan.r, YesCT, joelpittet, tstoeckler, larowlan, vijaycs85, swentel, rpayanm, Bojhan, LewisNyman, emma.maria, BarisW, njbarrett, rteijeiro, nod_, sun, joshtaylor, mrjmd, webchick, marcvangend, kattekrab, SKAUGHT, bowersox, andrewmacpherson, Manjit.Singh, RavindraSingh, Wim Leers, BLadwin, aspilicious, mortendk, mausolos, jessebeach, Gábor Hojtsy, anandps, falcon03, franz, andypost, rooby, rootwork, Cottser, Xano: Inline form errors for accessibility and UX

Issue #2501655 by tim.plunkett, hchonov, willzyx: ConfirmFormHelper::buildCancelLink() incorrectly handles ?destination URLs with a leading slash

Issue #2335661 by Wim Leers, pwolanin, dawehner, Fabianx, larowlan, catch, Berdir: Outbound path & route processors must specify cacheability metadata

Issue #2473759 by tim.plunkett, Berdir, effulgentsia: Form caches should be deleted after submission

Issue #2368987 by Wim Leers, Berdir, Schnitzel, epari.siva, bircher, vijaycs85, likin: Move internal page caching to a module to avoid relying on config get on runtime

Issue #2226621 by JeroenT, ianthomas_uk, lokapujya, pjonckiere, marcingy, LinL, Xano, rpayanm, piyuesh23: Remove usage of element_info(), element_child() and element_children(). Deprecate element_info_property()

Issue #2457887 by prateekMehta, stefan.r, rpayanm, alexpott: Use Utility\SafeMarkup class instead of Utility\String for placeholder(), checkPlain(),format() functions

Issue #2388349 by almaudoh: FormState::cleanValues() doesn't conform with the FormStateInterface documentation

Issue #2417333 by Wim Leers, pwolanin, xjm, dawehner: Add support for user-path: scheme to Url class

Issue #2392319 by alexpott, effulgentsia: Config objects (but not config entities) should by default be immutable

Issue #1985406 by jhedstrom, alexpott, Dave Reid, olli: #states not supported for elements in formatter settings being displayed on Views field handler form