[SECURITY] Open redirection with jumpurl

jumpurl allows redirect to any given URL. A hash on the url
is now required to know if the jumpurl has been created
by the system or by the outside.

The hook "jumpurlRedirectHandler" can be used to allow
redirects without hash or to custom redirects.

Fixes: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Change-Id: I63da18b1963ec50cd95dd49d1669c9873b7bab54
Security-Commit: 7d8f970aeb512e1a3d3da23308edbbcb324d57de
Security-Bulletin: TYPO3-CORE-SA-2013-001
Reviewed-on: https://review.typo3.org/18728
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[TASK] Raise submodule pointer

Change-Id: I3ad560328f2e37de97809a2b5bd6da2347ae3d43
Reviewed-on: https://review.typo3.org/18737
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[RELEASE] Release of TYPO3 4.6.17

Change-Id: I257db407a3a3c6f058c67eb1caf82702f32b4004
Reviewed-on: https://review.typo3.org/18743
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.6.18-dev

Change-Id: I6fbdee5980c7e84242c84157be61f091b2495da5
Reviewed-on: https://review.typo3.org/18744
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUFIX] External URL regression by jumpurl security fix

With the jumpurl security fix, pages of type
'Link to external URL' throw a jumpurl
hash exception if called in the frontend. This typically
happens if a HMENU renders such page links.

The patch adapts the TSFE logic to write the required
hash dynamically to _GET to make the jumpurl check happy
that is called later on within the same process if
calling such a 'external url' link.

Change-Id: Ie73cd9710929c72aad4e75543f90c8618797997b
Fixes: #46071
Related: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Reviewed-on: https://review.typo3.org/18766
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
[RELEASE] Release of TYPO3 4.6.18

Change-Id: I858b4d638f1bc415a29b6b0d3a276020ee85b9e0
Reviewed-on: https://review.typo3.org/18773
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.6.19-dev

Change-Id: Ic57d3af1091872b96d3b04a6959a5969a0c4aa08
Reviewed-on: https://review.typo3.org/18774
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
Merge remote-tracking branch 'forge/TYPO3_4-6' into TYPO3_4-6 after the release of TYPO3 4.6.18