[SECURITY] Open redirection with jumpurl

jumpurl allows redirect to any given URL. A hash on the url
is now required to know if the jumpurl has been created
by the system or by the outside.

The hook "jumpurlRedirectHandler" can be used to allow
redirects without hash or to custom redirects.

Fixes: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Change-Id: I63da18b1963ec50cd95dd49d1669c9873b7bab54
Security-Commit: ad62088840f78ed3947cfb9b66ef20d6d9760b69
Security-Bulletin: TYPO3-CORE-SA-2013-001
Reviewed-on: https://review.typo3.org/18734
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[TASK] Raise submodule pointer

Change-Id: I40dc056b209f1105ea18b78a4700c62e14018b6f
Reviewed-on: https://review.typo3.org/18740
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team
[BUFIX] External URL regression by jumpurl security fix

With the jumpurl security fix, pages of type
'Link to external URL' throw a jumpurl
hash exception if called in the frontend. This typically
happens if a HMENU renders such page links.

The patch adapts the TSFE logic to write the required
hash dynamically to _GET to make the jumpurl check happy
that is called later on within the same process if
calling such a 'external url' link.

Change-Id: Ie73cd9710929c72aad4e75543f90c8618797997b
Fixes: #46071
Related: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Reviewed-on: https://review.typo3.org/18753
Reviewed-by: Anja Leichsenring
Tested-by: Anja Leichsenring
Reviewed-by: Gregor Hermens
Tested-by: Gregor Hermens
Reviewed-by: Helmut Hummel
Tested-by: Helmut Hummel
Merge remote-tracking branch 'origin/master' into master-7elix3