#323474 by gpk, Dave Reid, catch: hook_boot() was not called on non-cached pages when agreesive caching was on

#169937 by Heine, drumm, alexanderpas, Darren Oh: only regenerate session if the user is the current global user

#257009 by bjaspan, Freso, Darren Oh: check to not create global constraints twice in PostgreSQL (for example, when the testing framework is running)

#347228 by kajetan: user was redirected to admin/build/translate instead of admin/build/translate/import

- Patch #262920 by ainigma32: language selection for domain should look at HTTP_HOST not SERVER_NAME.

#245990 by Dave Reid, chx, dww: Look for the www.example.com page when a HTTP request seems to fail. Looking for the local page caused problems for people with interactive authentication, redirects, hosting added JavaScript code, and so on.

#345167 by JacobSingh, pwolanin, Heine: drupal_http_request() includes an extra CRLF, not conformant to HTTP specs

#276111 by pwolanin, meba and myself: disallow possibly dangerous submissions in locale translations and imports

#333060 by neclimdul, merlinofchaos, dvessel: child themes did not inherit patterns correctly, so more specific template files are not detected

#299582 by hass: Remove outdated items from robots.txt and fix ordering of items to make stuff easier to find.

#28776 by Uwe Hermann, Morbus Iff, jvandyk: Protect *.test files and SVN metafiles from being exposed under Drupal

#280934 follow up by pwolanin: harden the cookie handling in sess_regenerate() by setting our session cookie to be an HTTP only cookie, thus reducing the risk of session stealing via XSS

#324875 by pwolanin: improve HTTP_HOST checking, ensuring that the host is lowercased and only valid characters are allowed.

- Patch #335385 by Dave Reid: fixed maxlength of path alias fields to be consistent with the database.

#302638 by pwolanin: avoid running several no-op queries while the menu is being rebuilt; improves performance