Thanks for preparing these diffs! Is the empty file tests/docroot/www/index.html~ actually supposed to be included? That seems like a backup file to me. Have these patches been runtime tested too? The changelog log looks great (very detailed!) the only thing I would change is to include the CVEs for each patch so that the automatic CVE scanner can find them and mark them as "fixed".
Thanks for preparing these diffs! Is the empty file tests/docroot/ www/index. html~ actually supposed to be included? That seems like a backup file to me. Have these patches been runtime tested too? The changelog log looks great (very detailed!) the only thing I would change is to include the CVEs for each patch so that the automatic CVE scanner can find them and mark them as "fixed".