Issue #2853671 by jacob.embree, dpi, poker10, apaderno: [D7] Useless test in UserRegistrationTest.php

Issue #3357707 by mcdruid, mitthukumawat, fjgarlin, jijojoseph_zyxware, poker10, prasanth_kp, hestenet: Backport the Announcements Feed core module to Drupal 7

Issue #2180877 by poker10, ClassicCut, juankvillegas: file_validate_image_resolution() doesn't recalculate the image dimensions after checking $maximum_dimensions

Issue #2847553 by poker10, Jill L, David_Rothstein: XSS attribute handling mangles valid attribute names containing numbers (D7 backport)

Issue #3384397 by poker10, Fabianx: [D7] When adding a new menu link, restrict the available parents to the current menu

Issue #764408 by poker10, sgtpep, acrollet, David_Rothstein, checker, Fabianx, bkouchi: [D7] Drupal.t() does not respect locale_custom_strings

Issue #691932 by BTMash, Shellingfox, jhedstrom, dinarcon, AndyF, zhangtaihao, catch, MustangGB, wamilton, Barry_Fisher, brad.bulger, yched, xjm, Sylvain Lecoy, 5n00py, chx, droplet, tim.plunkett, ohthehugemanatee, parasolx, cilefen, andypost, poker10, Fabianx: Add hook_field_schema_alter()

Issue #3396440 by poker10, joelpittet, tibezh, Fabianx: [D7 PHP 8.1] html_entity_decode(): Passing null to parameter #1 ($string) of type string is deprecated in decode_entities()

Issue #2345695 by poker10, formatC'vt, frodri, quietone, mgifford, mondrake, thirdender, james.williams: Users are able to upload 0-byte images

Issue #2880910 by tatarbj, joseph.olstad, vijaycs85, poker10, klausi, oadaeh, mahalingam_cs, David_Rothstein, mcdruid: [D7] Nothing clears the "5 failed login attempts" security message when a user resets their own password

Issue #3348669 by Chase., poker10: system.mail.inc: strpos(): Passing null to parameter #1 ($haystack) of type string is deprecated

Issue #3372666 by hadsie, poker10, ayushmishra206, jibran, larowlan, amietpatial, alexpott, aalamaki, afox, mark_fullmer, mohit_aghera, Wim Leers, wroxbox, tanubansal, rteijeiro, NikolaAt, rakesh.gectcr, richardbporter: D7 Backport: Links with "@" are converted into email addresses even if there is no domain suffix present

Issue #2540830 by swarad07, mikemadison, jhodgdon, poker10, David_Rothstein, cilefen: Sanitize watchdog() link in dblog_event()

Issue #3373222 by Gábor Hojtsy, mcdruid: Fallback to feed item description does not strip HTML, only takes 40 chars even though field allows 255

Issue #1705618 by sun, nod_, mgifford, hanoii, clemens.tolboom, poker10, torotil, Wim Leers, Matt V., helmo, mcdruid, joseph.olstad, JvE, tim.plunkett, Bojhan, fawwad.nirvana, GuyPaddock, Dries, David_Rothstein: Double click prevention on form submission

Issue #3007538 by poker10, torotil, DamienMcKenna, Jorrit, Fabianx: Cron.php does not check for maintenance mode correctly

Issue #2164025 by skipyT, mcdruid, pwolanin: Improve security of session ID against DB exposure or SQL injection

Issue #3293648 by mcdruid, poker10: [D7 backport] Update status does not verify the identity or authenticity of the release history URL

Issue #2060235 by lauriii, poker10, gaas: Getting a PDOException when adding new image style named thumbnail, medium and large

Issue #1470236 by iamEAP, mstrelan, poker10, divesh.kumar: Array flip error when a taxonomy term field has a NULL value

Issue #1451072 by David_Rothstein, DuttonMa: Deleting a comment author while the Comment module is disabled leads to an EntityMalformedException error after it's reenabled

Issue #998632 by dalin, poker10: drupal_write_record() throws PHP notices if any fields use DB-specific data types

Issue #3308471 by poker10: [D7] Update CommonXssUnitTest::testBadProtocolStripping() to check other allowed / dangerous protocols

Issue #1621334 by SebCorbin, poker10, szt, larowlan, swentel, salvis: Notice: Undefined property: stdClass::$forum_tid in forum_node_view()