Issue #1874612 by plopesc: Simplify file.inc by file_stream_wrapper_valid_scheme()(FALSE) return FALSE.

Issue #575298 by sun, tim.plunkett, Rob Loach, KrisBulman, Jacine, danillonunes: Provide non-PHP way to reliably override CSS.

Issue #1229014 by bfroehle, jackbravo: Content-Disposition header makes private files show open/save prompts, but public files show inline.

Issue #1814086 by samhassell, fgm: Convert autoloader_mode in drupal_classloader() to its own global.

Issue #1158322 follow-up by chx: Fixed htmlspecialchars() expects parameter 1 to be string, array given errors in exception backtraces.

Issue #1870612 follow-up by David_Rothstein: Tests for SA-CORE-2012-004 - Drupal core - Arbitrary code execution via file upload.

Issue #1810386 by plach, YesCT, Bojhan, bforchhammer, Gábor Hojtsy, falcon03: Create workflow to setup multilingual for entity types, bundles and fields.

Issue #1852966 by yched, Stalski, zuuperman, swentel: Rework entity display settings around EntityDisplay config entity.

Revert "Issue #1852966 by yched, swentel: Rework entity display settings around EntityDisplay config entity."

This reverts commit 8ad67af2.

Issue #1852966 by yched, swentel: Rework entity display settings around EntityDisplay config entity.

Caused blocks as plugins patch to no longer apply; temporary rollback.

This reverts commit d395e8af.

Issue #1849752 by effulgentsia, Berdir: Abstract non-Drupal-specific parts of AnnotatedClassDiscovery into a Drupal\Component base class.

Issue #1868602 by LinL: Fixed A couple of references to terms_per_page_count() instead of terms_per_page_admin().

Issue #1817182 by andypost, alexpott, yched: Add upgrade path tests for contact category config conversion.

Issue #1874342 by erikwebb: Fixed Undefined constant STEAM_WRAPPERS_LOCAL used in file_get_stream_wrappers() documentation.

Issue #1873608 by David_Rothstein: Improve documentation of format_string() to emphasize that it is used to prepare variables for HTML display.

Issue #1870614 by plach, greggles, dww, mr.baileys, David Rothstein: Fixed SA-CORE-2012-004 - Drupal core - Search shows blocked users.

Issue #1870612 by greggles, aasarava, quicksketch, Justin_KleinKeane, John Morahan: SA-CORE-2012-004 - Drupal core - Arbitrary code execution via file upload.

Revert "Issue #1810480 by dawehner, ACF: Provide the plugin_id() to support views metadata integration."

Oops. Broke testbot.

This reverts commit 015d61bc.

Issue #1861604 by hefox: Skip module_invoke()/module_hook() in calling hook_watchdog() (excessive function_exist()).