Those on ReleaseNotes181 are the best available.

• Added exit to all header events to prevent further execution of code. Damian
• Added a check on image extension in wiki pictures to avoid php injection (see art97 with details) mose

• Removed the XHTML bottom button because it's just a rant that is not strictly exact. mose

None