[SECURITY] Remove charts.swf to get rid of XSS vulnerability

The file charts.swf is vulnerable to XSS, is delivered
by ExtJS but not used in TYPO3 CMS at all.

Since the vendor of ExtJS did not fix this vulnerability,
we decided to remove it from TYPO3 sources.

Change-Id: Idbf156686d55c7bcbf1f185b4c17aa0771ce9b0e
Fixes: #54526
Releases: 6.2, 6.1, 6.0, 4.7, 4.5
Security-Commit: 9a75c13e0a46545ca55967c00e058103b9454c9f
Security-Bulletin: TYPO3-CORE-SA-2014-001
Reviewed-on: https://review.typo3.org/30276
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Fix insecure unserialize in colorpicker

Change-Id: I78b29a745c23c1b1d5359226a24150aad0dff764
Fixes: #56458
Releases: 6.1, 6.0, 4.7, 4.5
Security-Commit: 068217be9a0752cfa75ac2b4e35dfa57b52f68bf
Security-Bulletin: TYPO3-CORE-SA-2014-001
Reviewed-on: https://review.typo3.org/30277
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader
[SECURITY] Encode URL for use in JavaScript

The url for the Open in New Window button must be quoted for
use in JavaScript to prevent XSS issues.

Change-Id: I5b143137e90b6f4c774af8a1a219eea2b1a73d81
Fixes: #48693
Releases: 6.2, 6.1, 6.0, 4.7, 4.5
Security-Commit: 1535ed05e1c64b36b225d9f118325b4f985f5ddf
Security-Bulletin: TYPO3-CORE-SA-2014-001
Reviewed-on: https://review.typo3.org/30278
Reviewed-by: Oliver Hader
Tested-by: Oliver Hader