open-redirect

From README

Open Redirect Security Check (CWE-601) What this checks Protects against open redirect vulnerabilities where an attacker crafts a link that redirects users from a trusted domain to a malicious site. Used in phishing campaigns to make malicious links appear legitimate, and in OAuth flows to steal authorization codes. Vulnerable patterns Redirect target read directly from a query parameter, form field, or request body and passed unchanged to the framework's redirect API. Client-side navigation (window.location and equivalents) assigned a value derived from the URL or form input with no validation. "Return to" or "next" parameters on login flows that accept any URL without an allowlist check. Validation that uses prefix or substring matching against the allowed host — allowed.com.evil.com passes a naive prefix check. Fix immediately Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties.