Fix open redirect vulnerability.