[SECURITY] Open redirection with jumpurl

jumpurl allows redirect to any given URL. A hash on the url
is now required to know if the jumpurl has been created
by the system or by the outside.

The hook "jumpurlRedirectHandler" can be used to allow
redirects without hash or to custom redirects.

Fixes: #28587
Releases: 6.1, 6.0, 4.7, 4.6, 4.5
Change-Id: I63da18b1963ec50cd95dd49d1669c9873b7bab54
Security-Commit: 3c9774e15f7e0873addd48688be44110d1eccbb7
Security-Bulletin: TYPO3-CORE-SA-2013-001
Reviewed-on: https://review.typo3.org/18727
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[TASK] Raise submodule pointer

Change-Id: If5a0e75166a5ae595cc941beaff8e4f9ba2f5a5f
Reviewed-on: https://review.typo3.org/18736
Reviewed-by: TYPO3 Release Team
Tested-by: TYPO3 Release Team