[TASK] Raise submodule pointer

Change-Id: Id625eb9cc310f979899b3bd81d6eb43740825368
Reviewed-on: http://review.typo3.org/9989
Reviewed-by: TYPO3 v4 Release Team
Tested-by: TYPO3 v4 Release Team
[SECURITY] XSS possibility in RemoveXSS

RemoveXSS fails to properly remove non printable characters, especially
zero-byte (\x00) chars.

Change-Id: I7005a7fbea98f224eab10cc639d6008d56adb2f6
Fixes: #30188
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: 5c4076c527bb91f1232ed490eff779f78f89402b
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10030
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in be_layouts

Some values from the backend layout configuration
are not properly escaped

Change-Id: Id08f8f21d5c429e05e5de938e46eb2532855f5a6
Fixes: #29536
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: d34ae5f174a0fc5242323909771a6fbf21ef785b
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10032
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in BE file list

Change-Id: I772490b260eb06e714ec57cdf75a6166f53eaea1
Fixes: #30940
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: dbed57cf912b792ae694ce4c6092a1900da9904b
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10033
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping in scheduler

A proper escaping is missing for field "frequency"
Sanitize submitted uid

Change-Id: I882d167f55b813f7f20beba48ee09792acec4935
Fixes: #24474
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: 68a9d5c2de0b6d466373cdde07fef03161bfa2de
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10034
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Missing escaping for sys_notes

sys_notes misses an escaping in info module

Change-Id: If420168807f609709a767c7fb1d6a4d504d277f8
Fixes: #22748
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Commit: 31c4fdb3c3c9fe9d1a28fd13ca69f8b97d15459e
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10035
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] XSS in show item

Change-Id: Ia6a5d5d6d350eee0a440a4ce8299f2a483bed58d
Fixes: #29397
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9935
Security-Commit: 582a55d38d48c24d6e04fc7d213f0d74644ab689
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10036
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Information disclosure showing DB name

By accessing a cli script in the frontend, it is possible
that the DB name is shown.

Change-Id: Iac35d41ec7953fe14311b3bb619cc137389566fc
Fixes: #29060
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/9936
Security-Commit: 4953abf5d8e3c5eeeb60f5a8dcd919985f063ab3
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10037
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[!!!][SECURITY] XSS in filelink element

Add escaping to description and file name of file link content element.
Warning: There is no longer HTML possible in description!

Change-Id: Id9da65e927080db4e548811f9a82e0cf7e88e214
Fixes: #25246
Releases: 6.0, 4.7, 4.6, 4.5, 4.4
Security-Review: http://review.typo3.org/7236
Security-Commit: a4006c10b5ac505a951131bbe3166a4271c62268
Security-Bulletin: TYPO3-CORE-SA-2012-001
Reviewed-on: http://review.typo3.org/10038
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader