Fix XSS issue - sanitisation of rot13 decoded text. Requires admin access or admin (mis)configuration of text filters to allow Full HTML text format for non-admins (or equivalent) and other configuration steps before this issue can be exploited.
Includes a number of bug fixes that were in the issue queue. More to come when I've completed getting the other modules I maintain running under Drupal 10.