favicon.ico and other binary resource files were broken since 2.79 because they were incorrectly filtered during the build.
(issue 47127)
Don't log warning when an anonymous user sends an invalid crumb, usually just an expired session.
(issue 40344)
Developer: Fix TimeDuration time unit handling and its incorrect usage. TimeDuration uses milliseconds as the default unit. It was supposed to parse sec or secs suffix to interpret the number as seconds, but that never worked.
(issue 44052)
Developer: Create a copy of a list of parameters in ParametersAction constructor before storing them to improve robustness when the caller reuses that list.
(issue 45472)