Contribution records credited to joelpittet

Drupal core

• Ensure that SafeString objects can be used in non-HTML contexts
  Mon, 10/12/2015 - 08:24
• Add Twig filter for date formatting
  Sun, 10/11/2015 - 12:24
• BasicStringFormatter's nl2br() forces escaping *and* filtering — improve this
  Sat, 10/10/2015 - 23:54
• Remove all code usages SafeMarkup::checkPlain() and rely more on Twig autoescaping
  Sat, 10/10/2015 - 18:44
• Views render pipeline is escaping CustomBooleanTest
  Sat, 10/10/2015 - 15:34
• Nested form tag in views forms
  Sat, 10/10/2015 - 14:14
• Followup: Remove unneeded label class from admin/reports/translations
  Sat, 10/10/2015 - 14:04
• Document each use of base: in rest.module
  Sat, 10/10/2015 - 14:04
• Replace arrow-asc and arrow-desc images with Libricons and implement using CSS
  Sat, 10/10/2015 - 10:44
• Fix use of !placeholder for imploding in views.views.inc
  Fri, 10/09/2015 - 17:54
• Replace !placeholder with @placeholder for non URLs in t() in Views, except for t() output that is used as an attribute value
  Wed, 10/07/2015 - 15:24
• Add a new :placeholder to SafeMarkup::format() for URLs that handles bad protocols
  Wed, 10/07/2015 - 10:44
• Replace remaining !placeholder for Non-URL HTML outputs only for $e->getMessage()
  Sun, 10/04/2015 - 17:54
• Change translatable string with !placeholder AccountForm to use a URL instead of a generated link and provide better context
  Sun, 10/04/2015 - 14:44
• Move logic from SafeMarkup::format() from template_preprocess_locale_translation_update_info() to template
  Sun, 10/04/2015 - 09:54
• Replace remaining !placeholder for Non-URL HTML when format_size() is involved
  Sat, 10/03/2015 - 13:44
• Escaped markup with $.text() injected into a tag will cause XSS
  Thu, 10/01/2015 - 15:54
• Convert page elements (local tasks, actions) into blocks
  Wed, 09/30/2015 - 14:24
• Cast safe string objects to string or use assertEqual() in some assertIdentical() comparisons
  Tue, 09/29/2015 - 19:14
• Remove use of SafeMarkup::checkPlain() from adminSummary() and adminLabel() in views plugins
  Tue, 09/29/2015 - 07:14
• Replace !placeholder with @placeholder in t() and format_string() for non-URLs in tests
  Tue, 09/29/2015 - 00:44
• Use assertText() instead of t()/SafeMarkup::format() in NodeEditFormTest
  Mon, 09/28/2015 - 19:34
• Remove !placeholder in NodeRevisionUiTest and make it actually test the expected output
  Mon, 09/28/2015 - 19:14
• Views replacement token bc layer allows for Twig template injection via arguments
  Mon, 09/28/2015 - 19:04
• Remove $this->t() and SafeMarkup::format() in SelectLanguageForm
  Mon, 09/28/2015 - 11:34
• Fix improper usage of t() in ViewsBlock
  Mon, 09/28/2015 - 11:24
• Twig autoescape default strategy deprecation error triggered on every page load
  Sun, 09/27/2015 - 19:44
• Cast (optgroup) array keys that may hold translated strings to string
  Sun, 09/27/2015 - 11:34
• Use branding block in place of page template branding variables (site name, slogan, site logo)
  Fri, 09/25/2015 - 19:44
• "Text on demand" for "input required" exposed form plugin is not displayed
  Thu, 09/24/2015 - 23:34
• Cast TranslationWrapper objects in config to string during Config::set()/setData()
  Thu, 09/24/2015 - 11:54
• Remove !placeholder usage from SafeMarkup::format()
  Thu, 09/24/2015 - 00:24
• Field default markup - removing the divitis
  Mon, 09/21/2015 - 20:14
• Specific preprocess functions for theme hook suggestions are not invoked
  Sat, 09/19/2015 - 16:14
• [meta] Remove every SafeMarkup::set() call
  Fri, 09/18/2015 - 13:04
• Fix broken page title Update Manager (authorize.php)
  Sat, 09/12/2015 - 06:57
• Remove obsolete reference to SafeMarkup::set() in LinkGeneratorTest documentation
  Sat, 09/12/2015 - 06:14
• Add #plain_text to escape text in render arrays
  Sat, 09/12/2015 - 01:24
• Remove SafeMarkup::set in FormErrorHandler::displayErrorMessages()
  Thu, 09/10/2015 - 14:14
• Remove many usages SafeMarkup::checkPlain() and replace with Html::escape()
  Wed, 09/09/2015 - 10:34
• InfoParserUnitTest web test classes mislabeled as unit tests
  Tue, 09/08/2015 - 15:34
• Remove SafeMarkup::set() in template_preprocess_views_view_table()
  Tue, 09/08/2015 - 15:24
• views-view-fields.html.twig gets escaped
  Tue, 09/08/2015 - 14:04
• Remove SafeMarkup::set in ViewListBuilder
  Fri, 09/04/2015 - 12:54
• Remove SafeMarkup::set() in ValidationTest::assertErrorMessages()
  Thu, 09/03/2015 - 10:54
• Remove SafeMarkup::set() in Error::renderExceptionSafe() and _drupal_log_error() and improve backtrace formatting consistency in _drupal_log_error(), Error::renderExceptionSafe(), and DefaultExceptionSubscriber::onHtml ()
  Thu, 09/03/2015 - 09:04
• Remove system_requirements() SafeMarkup::set() use
  Thu, 09/03/2015 - 01:04
• SafeMarkup::format() should require arguments without them it is just SafeMarkup::set() in disguise
  Wed, 09/02/2015 - 22:14
• Remove system_requirements() SafeMarkup::set() use with 'value' key
  Wed, 09/02/2015 - 16:24
• Enable ENT_SUBSTITUTE flag in Html::escape
  Wed, 09/02/2015 - 08:04