Issue #2554233 by pwolanin, tim.plunkett, amateescu, dawehner, Wim Leers, catch, effulgentsia, larowlan, Abdullah Hussam, greggles, David_Rothstein: Port Cross-site Request Forgery - Form API fixes from SA-CORE-2015-003 to Drupal 8

Issue #2526326 by borisson_, Berdir, Wim Leers, Xano: Update CacheableMetadata & AccessResult to use RefinableCacheableDependency(Interface|Trait)

Issue #2502785 by dawehner, effulgentsia, tim.plunkett, amateescu, Fabianx, Wim Leers, catch, dsnopek, EclipseGc, yched, Berdir, larowlan, mondrake, olli: Remove support for $form_state->setCached() for GET requests

Issue #2487600 by dawehner, Wim Leers, fgm: #access should support AccessResultInterface objects or better has to always use it

Issue #2500527 by dawehner, tim.plunkett, effulgentsia: Rewrite \Drupal\file\Controller\FileWidgetAjaxController::upload() to not rely on form cache

Issue #1493324 by tim.plunkett, dmsmidt, mgifford, bleen18, davidhernandez, crasx, mparker17, stefan.r, YesCT, joelpittet, tstoeckler, larowlan, vijaycs85, swentel, rpayanm, Bojhan, LewisNyman, emma.maria, BarisW, njbarrett, rteijeiro, nod_, sun, joshtaylor, mrjmd, webchick, marcvangend, kattekrab, SKAUGHT, bowersox, andrewmacpherson, Manjit.Singh, RavindraSingh, Wim Leers, BLadwin, aspilicious, mortendk, mausolos, jessebeach, Gábor Hojtsy, anandps, falcon03, franz, andypost, rooby, rootwork, Cottser, Xano: Inline form errors for accessibility and UX

Issue #2473759 by tim.plunkett, Berdir, effulgentsia: Form caches should be deleted after submission

Issue #2121713 by tim.plunkett, dawehner, rteijeiro, jiv_e: Move drupal_html_id() and drupal_html_class() to Drupal\Component\Utility.

Issue #2271251 by ParisLiakos, undertext, JeroenT, StevenPatz, tim.plunkett: Remove usages of watchdog() from non-form and non-controllers.

Issue #697760 by sun: Replace getInfo() in tests with native phpDoc + annotations (following PHPUnit).

Issue #1289536 by ParisLiakos, RobLoach, Crell, larowlan, fgm, pounard, Pancho, dawehner, scor, tim.plunkett, alexpott, socketwench: Switch Watchdog to a PSR-3 logging framework.

Revert "Issue #1289536 by RobLoach, Crell, Pancho, pounard, socketwench, fgm, dawehner, scor, tim.plunkett, larowlan, ParisLiakos: Switch Watchdog to a PSR-3 logging framework."

This reverts commit ef250ba2.

Issue #1289536 by RobLoach, Crell, Pancho, pounard, socketwench, fgm, dawehner, scor, tim.plunkett, larowlan, ParisLiakos: Switch Watchdog to a PSR-3 logging framework.

Issue #2257835 by tim.plunkett, sun, Jalandhar: Move form submission logic out of FormBuilder into a new class.

Issue #1978924 by tim.plunkett, ParisLiakos, disasm, Luxian, vijaycs85, YesCT, vaibhavjain, Pancho: Convert locale_translate_export_form to a Controller.

Issue #1987716 by pfrenssen, tim.plunkett, kgoel: Provide a FormTestBase class to allow PHPUnit form tests.

Issue #2109793 by damiankloip, dawehner, tim.plunkett: Convert element_* methods in common.inc to a class.