fixed restricted redirection parameter