MVC Action Filter that prevents open redirects