TYPO3 Core

Hi folks,
forgive me but I can't know If I'm right posting here. Infact this problems should be associated to ttnews, content rendering or TYPO3 core.

This is what happens:

• in my TYPOSCRIPT I defined;
  page.config.linkVars = L

• howevere I don't use linkVars

• when this configuration is active the behaviour occurs and the links in several pages are modified as follow:

href="Title-of-my-Page.485.0.html?&L=0%2Fxmlrpc.php%3F%2F%22postnuke%22%3F%20%2Fxmlrpc.php"
onfocus="blurLink(this);"

• inspecting the database, table: cache_pages, field: cache_data I see this:

s:2:"id";i:364;s:4:"type";i:0;s:7:"gr_list";s:4:"0,-1";s:2:"MP";s:0:"";s:5:"cHash";a:3:{s:1:"L";s:25:"0/xmlrpc.php?/"postnuke"?";s:13:"encryptionKey";s:32:"8d5e12910fbc44afa9c361259a83ade6";s:18:"tx_ttnews[pointer]";s:1:"6";}}";}

• it seems that xmlrpc.php and postnuke string are addded through a tx_ttnews[pointer]

If i disable the use of linkVars all is OK, looking for postnuke or xmlrpc in the database the entries disappear. I suspect that there is some bug....
or security problem,

please help, you have all my collaboration to solve.

Thank you very much

(issue imported from #M12311)