- Patch #25354 by Thox: fixed Javascript caching.  Faster response and less server traffic for matches previously found.

  TODO: document the defaults in the PHPdoc comments.

  up the documentation a little.

  chx: can you double-check whether the global $conf variable is secure?
       (That is, make sure it can't be send using the URL or something.)

- Patch #21566 by deekayan: fixed user_access() function returning a string and not a boolean.  Also improves performance of user_access().

  NOTE: this patch works well, but the improved node edit form still has
        some rough edges.  It is important that we continue to improve
        usability.  Give it a try.

- Patch #24157 by chx/Robin/...: changed file_exists() to is_file() to fix several problems with modules using theimage toolkit.

  TODO: update the "Migrating themes from Drupal 4.6 to Drupal HEAD"-page in
        the Drupal handbook!
  TODO: update the themes in the contributions repository.

- Patch #21918 by budda/Robin: forum icons are broken when you change the forum icon path.  TODO 1: the forum icons should probably be configurable on a per-site or per-theme basis. TODO 2: I spent 5 minutes looking for this setting.

- Patch #25143 by Robin: use count() instead of is_array() so we don't render code for empty arrays, and such you don't get warnings using PHP5.

  to OPML export functionality, better code comments, better help texts, etc.

- Patch #24135 by Moshe: made it possible to ban visitors based on hostname/IP.  Banning visitors can either be done from the 'access control' pages, or directly from the statistics pages.  This feature is very convenient to block badly behaving crawlers.

See:
http://cvs.drupal.org/viewcvs/drupal/drupal/modules/book.module?r1=1.294&r2=1.295