https://onedetermination.com/other/bug-open-redirect-vulnerability/