Change this code to not perform redirects based on user-controlled data

Is this realy a bug or can we ignore this

Hi,

Welcome to the community!

Yes. You really need to fix this.

 
HTH,
Ann