[SECURITY] Open redirection with jumpurl

jumpurl allows redirect to any given URL. A hash on the url
is now required to know if the jumpurl has been created
by the system or by the outside.

The hook "jumpurlRedirectHandler" can be used to allow
redirects without hash or to custom redirects.

Fixes: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Change-Id: I63da18b1963ec50cd95dd49d1669c9873b7bab54
Security-Commit: a368fb9aa9811fd85d8e0a635c0bf80b68e4b9ed
Security-Bulletin: TYPO3-CORE-SA-2013-001
Reviewed-on: https://review.typo3.org/18730
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[TASK] Raise submodule pointer

Change-Id: I998c81965cc6c966a77b74ec6d2aec21bec5eae1
Reviewed-on: https://review.typo3.org/18738
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[RELEASE] Release of TYPO3 4.7.9

Change-Id: I8b8d427eccd91acc5b357efa75925530a2a3462e
Reviewed-on: https://review.typo3.org/18745
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.7.10-dev

Change-Id: Idf034660e824089eb9767bd39113ef4028d8248a
Reviewed-on: https://review.typo3.org/18746
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUFIX] External URL regression by jumpurl security fix

With the jumpurl security fix, pages of type
'Link to external URL' throw a jumpurl
hash exception if called in the frontend. This typically
happens if a HMENU renders such page links.

The patch adapts the TSFE logic to write the required
hash dynamically to _GET to make the jumpurl check happy
that is called later on within the same process if
calling such a 'external url' link.

Change-Id: Ie73cd9710929c72aad4e75543f90c8618797997b
Fixes: #46071
Related: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Reviewed-on: https://review.typo3.org/18767
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
[RELEASE] Release of TYPO3 4.7.10

Change-Id: Ief49506383d04bf76f4d7624f91382004a22d357
Reviewed-on: https://review.typo3.org/18775
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.7.11-dev

Change-Id: I5058a1763302e909148ad282a6c3171ce28c0b9b
Reviewed-on: https://review.typo3.org/18776
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
Merge remote-tracking branch 'forge/TYPO3_4-7' into TYPO3_4-7 after the release of TYPO3 4.7.9