Redirecting to a user-controlled URL without validation enables open redirect.
Validate redirect targets against an allowlist of permitted URLs.