Issue #2571695 by dawehner, plach, stefan.r, jaredsmith, lauriii, YesCT, xjm, catch, alexpott, joelpittet, Ryan Weal, Sutharsan, subhojit777, justAChris, nlisgo, effulgentsia, rpayanm, larowlan, chx, geertvd: Remove !placeholder and unsafe string return from SafeMarkup::format()

Issue #2565895 by dawehner, stefan.r, googletorp, effulgentsia, lauriii, jcnventura, David_Rothstein, catch, xjm, joelpittet, pwolanin, plach, larowlan, cilefen: Add a new :placeholder to SafeMarkup::format() for URLs that handles bad protocols

Issue #2554889 by Berdir, Cottser, Daniel_Rose, JeroenT, RavindraSingh, Wim Leers, YesCT, akalata, alexpott, alimac, aneek, catch, cdulude, chx, cilefen, cmanalansan, crowdcg, cwells, davidhernandez, dawehner, dtraft, effulgentsia, harjotsingh, hass, ianthomas_uk, joelpittet, josephdpurcell, justAChris, kbaringer, lauriii, lduerig, leslieg, lokapujya, mpdonadio, peezy, pwolanin, realdream, sclapp, stefan.r, tim.plunkett, webchick, xjm: Remove SafeMarkup::set() from the codebase.

Issue #2549393 by alexpott, dawehner, lauriii, andypost, xjm: Remove SafeMarkup::escape() and rely more on Twig autoescaping

Issue #2559969 by alexpott: Make SafeStringInterface extend \JsonSerializable so we don't have to do so much string casting

Issue #2552579 by alexpott: Remove SafeMarkup::placeholder(), deprecate drupal_placeholder() and stop drupal_placeholder() from marking safe

Issue #2550055 by geertvd, alexpott: Remove SafeMarkup::replace() and use ViewsRenderPipelineSafeString instead

Issue #2549791 by alexpott, Wim Leers: Remove SafeMarkup::xssFilter() and provide ability to define #markup escaping strategy and what tags to filter

Issue #2551335 by alexpott, Wim Leers: Remove unnecessary SafeMarkup usage in tests and clear the static cache before every run

Issue #2506195 by alexpott, joelpittet, xjm, David_Rothstein, Fabianx, pwolanin: Remove SafeMarkup::set() from Xss::filter()

Issue #2506133 by alexpott, joelpittet, dawehner, pwolanin: Replace SafeMarkup::set() in \Drupal\Core\Template\Attribute

Issue #2273925 by larowlan, aneek, lauriii, mikey_p, joelpittet, dimaro, Fabianx, xjm, jaredsmith, effulgentsia, lokapujya, iMiksu, chx, YesCT, googletorp, dawehner, Wim Leers, Cottser: Ensure #markup is XSS escaped in Renderer::doRender()

Issue #2454447 by andypost, dawehner, rteijeiro: Split Utility\String class to support PHP 7 (String is a reserved word)

Issue #2365965 by er.pushpinderrana, larowlan, Cristian.Andrei, gaurav.pahuja: Various tests still have getInfo method

Issue #2328919 by Mile23, YesCT, tim.plunkett: Remove () from a bunch of @covers definitions in PHPUnit

Issue #1825952 by Fabianx, joelpittet, bdragon, heddn, chx, xjm, pwolanin, mikey_p, ti2m, bfr, dags, cilefen, scor, mgifford: Turn on twig autoescape by default