I wonder if this should be a server-side redirect so that the server can verify which URLs it can redirect to? It's awfully annoying to have to hardcode these URLs