Issue #2507831 by dawehner, tim.plunkett, effulgentsia: Harden redirect responses to make external URIs opt in (was SA-CORE-2015-002 foward-port)

Issue #2455083 by dawehner, larowlan, klausi, David_Rothstein, hefox, tsphethean, dstol, DamienMcKenna, Pere Orga, benjy: Open redirect fixes from SA-CORE-2015-001 need to be ported to Drupal 8

Issue #2417645 by tim.plunkett, effulgentsia, pwolanin: Change destination query string handling to break dependence on system path

Issue #2350837 by dawehner, Berdir, larowlan, Wim Leers: Convert most usages of EntityInterface::getSystemPath() to use routes

Issue #2076325 by neclimdul, Mile23, alexpott: Fixed Drupal\Component\Utility\Url::externalIsLocal() is wrong in common cases.

Issue #2221695 by brantwynn, ianthomas_uk, grom358, ParisLiakos, Jalandhar: Remove uses of deprecated URL functions.

Issue #1998638 by damiankloip, dawehner, kim.pepper, cosmicdreams, alexpott, larowlan, Damien Tournoud: Replace almost all remaining superglobals (, , etc.) with Symfony Request object.

Issue #1998638 by damiankloip, dawehner, kim.pepper, cosmicdreams, larowlan, Damien Tournoud: Replace all remaining superglobals (, , etc.) with Symfony Request object.

Issue #2081209 by mrsinguyen: Remove Unused local variable () from /core/lib/Drupal/Core/EventSubscriber/RedirectResponseSubscriber.php.

Issue #2057155 by pwolanin, dawehner: Add a generateFromRoute() method on the url generator to accept options like url().

Stupid commit message. :P Fixing. :P

This reverts commit 838bf21e.

Issue #1668866 by ParisLiakos, aspilicious, tim.plunkett, pdrake, g.oechsler, dawehner, Berdir, corvus_ch, damiankloip, disasm, marcingy, neclimdul: Replace drupal_goto() with RedirectResponse.