Avoid possible XSS by open redirect.
refine admin dashboard.