Issue #1179424 by aspilicious, Heine, pwolanin, scor: Fixed Color module security fixes from SA-CORE-2011-001 not yet applied to Drupal 8.