[Security] simplified redirection url cleaning