- Patch #520764 by Damien Tournoud, JoshuaRogers, brianV: fixed SA-CORE-2009-007: request values in URL, including password/username.

- Patch #599804 by effulgentsia, catch, moshe weitzman, webchick: don't always set the Content-Type header.

#650758 by carlos8f: Fixed Overlay bug: admin links aren't transformed to overlay paths in IE/Opera.

- Patch #502190 by jhodgdon, stella, sun: hook implementation headers out of compliance with standards.

- Patch #636822 by jhodgdon, arianek, David_Rothstein, JuliaKM: help improvements for shortcut and toolbar.

- Patch #626024 by sun, catch: fixed filter_list_format() hits database too often / filter_format_save() doesn't save all filters.

- Patch #558928 by brandonojc, mgifford, Owen Barton, Everett Zufelt: improved consistency, flexibility and accessibility of form element labels.

#640348 by batigolix, arianek, lisarex, bangpound, and jhodgdon: Updated Taxonomy module to new help standard.

#610234 by Gábor Hojtsy, ksenzee, cwgordon7, David_Rothstein, seutje, marcvangend, sun, JoshuaRogers, markus_petrux, Bojhan, Rob Loach, Everett Zufelt, drifter, markboulton, leisareichelt, et al: Added Overlay module to core, which shows administrative pages in a JS overlay, retaining context on the front-end site.

- Patch #647336 by boombatower, Morbus Iff: fixed bug with when xmlrpc() is called with no function arguments. Added some extra XML-RPC tests.