Issue #2140447 by larowlan, Heine: Open redirect in overlay (forward port of SA-CORE-2013-003).