[BUGFIX] Keep hyphens in custom HTML5 attributes

In frontend rendering hyphens in custom attribute names must be kept.
Use the same regexp as in t3lib_parsehtml keeps allowed special
characters.

Change-Id: I6253f1c4c0a14389fc6261c62752e41f9ddb66f9
Releases: 4.8, 4.7, 4.6, 4.5
Fixes: #34371
Reviewed-on: https://review.typo3.org/9563
Reviewed-by: Steffen Ritter
Reviewed-by: Philipp Gampe
Reviewed-by: Mario Rimann
Reviewed-by: Stefan Neufeind
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[BUGFIX] Check minitems for TCAtree

The TCAtree ignores currently the minitems.
This is however e.g. needed to require input for a relation field.

Change-Id: I41b345f19f845a8b31e791c11a7c4a907d499ad5
Resolves: #25003
Releases: 4.7, 4.6, 4.5
Reviewed-on: https://review.typo3.org/12797
Reviewed-by: Wouter Wolters
Reviewed-by: Marcus Schwemer
Tested-by: Marcus Schwemer
Reviewed-by: Stefan Neufeind
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Open redirection with jumpurl

jumpurl allows redirect to any given URL. A hash on the url
is now required to know if the jumpurl has been created
by the system or by the outside.

The hook "jumpurlRedirectHandler" can be used to allow
redirects without hash or to custom redirects.

Fixes: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Change-Id: I63da18b1963ec50cd95dd49d1669c9873b7bab54
Security-Commit: 3c9774e15f7e0873addd48688be44110d1eccbb7
Security-Bulletin: TYPO3-CORE-SA-2013-001
Reviewed-on: https://review.typo3.org/18727
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[TASK] Raise submodule pointer

Change-Id: If5a0e75166a5ae595cc941beaff8e4f9ba2f5a5f
Reviewed-on: https://review.typo3.org/18736
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[RELEASE] Release of TYPO3 4.5.24

Change-Id: If6102d6b79cfd35350b8e80b90a54a6d14ef065a
Reviewed-on: https://review.typo3.org/18741
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.5.25-dev

Change-Id: I34308235cb9a9a3518427bc01be6a6a40f8bd24d
Reviewed-on: https://review.typo3.org/18742
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUFIX] External URL regression by jumpurl security fix

With the jumpurl security fix, pages of type
'Link to external URL' throw a jumpurl
hash exception if called in the frontend. This typically
happens if a HMENU renders such page links.

The patch adapts the TSFE logic to write the required
hash dynamically to _GET to make the jumpurl check happy
that is called later on within the same process if
calling such a 'external url' link.

Change-Id: Ie73cd9710929c72aad4e75543f90c8618797997b
Fixes: #46071
Related: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Reviewed-on: https://review.typo3.org/18755
Reviewed-by: Wouter Wolters
Tested-by: Wouter Wolters
Reviewed-by: Stefan Neufeind
Tested-by: Stefan Neufeind
Reviewed-by: Gregor Hermens
Tested-by: Gregor Hermens
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
[RELEASE] Release of TYPO3 4.5.25

Change-Id: I930eee365b05613162ca5d386d7e4c36511fb4b0
Reviewed-on: https://review.typo3.org/18771
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[TASK] Set TYPO3 version to 4.5.26-dev

Change-Id: I884b7a09079e0aa45426e423e1ff91272c5d5802
Reviewed-on: https://review.typo3.org/18772
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
Merge remote-tracking branch 'forge/TYPO3_4-5' into TYPO3_4-5 after the release of TYPO3 4.5.25