#117748 by webchick, Pancho, Rob Loach, pwolanin: required field values were not properly trim()ed on validation

#128846 by takashi, chx, bdragon, wedge, salvis, Shiny: rewritten queries on PostreSQL need to have matching DISTINCT ON and ORDER BY expressions

- Patch #258128 by webchick: @parameter should be @param.  Gets the Most Trivial Patch of the Month Award.
Backport by gpk.

- Patch #191116 by david: make drupal_urlencode() rfc 1738 compliant to make it work correctly with spaces.

- Patch #231132 by snufkin: fixed invalid XML-RPC error messages due to HTML tags being inserted in the message string.

Backport in #109459.

#104220 by ChrisKennedy: remove arbitrary half post max size restriction on maximum uploadable file size.
Backport by Bart Jansens.

#215252 by bdragon: reset the cache flush variable before the cache is flushed, so busy sites will not attempt multiple cache flushes at a time

#168315 by schuyler1d: previous active database name was not consistently returned in db_set_active()

#180126 by mmoreno, drewish and scor: add realpath() call to file_save_data(), so Windows will create temporary files properly

#182410 by greggles: HTTP Basic authentication username and password was parsed in drupal_http_request() but then not used in the request

#173459 by Dave Cohen. Backport of #78487 by FredCK, forngren and bjaspan: document <front> support in url() and l() and proper active class support for <front>.

- Patch #181063 by chx and bjaspan: fixed problem with drupal_bootstrap() not booting to the proper level.

#112064 by Dave Cohen and pwolanin: do not cache installer redirects, so live Drupal pages will be visible instead of cached installer pages

#150759 by hass. Remove @charset rules for aggregated stylesheets, which were incorrect and confused Safari.

#160107 by JohnAlbin: use the same session ID regardless of the protocol used to access the page (eg share sessions between http and https pages)