[FOLLOWUP][BUGFIX] Fix CSRF protection token in localization overview

This patch streamlines the concatenation of the onEdit link and
additional Javascript. See https://review.typo3.org/42084

Related: #67866
Related: #68604
Releases: master
Change-Id: I05972eeda2a0f8965b6e37f981dc56feef3f71c0
Reviewed-on: http://review.typo3.org/42088


Reviewed-by: Markus Klein <markus.klein@typo3.org>
Tested-by: Markus Klein <markus.klein@typo3.org>
Reviewed-by: Wouter Wolters <typo3@wouterwolters.nl>
Tested-by: Wouter Wolters <typo3@wouterwolters.nl>

typo3/sysext/frontend/Classes/Controller/TranslationStatusController.php

@@ -250,10 +250,10 @@ class TranslationStatusController extends \TYPO3\CMS\Backend\Module\AbstractFunc
 				$params = '&columnsOnly=title,hidden,sys_language_uid&overrideVals[pages_language_overlay][sys_language_uid]=' . $langRow['uid'];
 				$onClick = BackendUtility::editOnClick($params);
 				if (!empty($newOL_js[$langRow['uid']])) {
-					$onClickArray = explode('\'', $onClick);
+					$onClickArray = explode('?', $onClick, 2);
 					$lastElement = array_pop($onClickArray);
-					array_push($onClickArray, $newOL_js[$langRow['uid']] . $lastElement);
-					$onClick = implode('\'', $onClickArray);
+					array_push($onClickArray, '\'' . $newOL_js[$langRow['uid']] . ' + \'&' . $lastElement);
+					$onClick = implode('?', $onClickArray);
 				}
 				$tCells[] = '<td><a href="#" onclick="' . htmlspecialchars($onClick)
 					. '" title="' . $lang->sL(