given openproject runs in a subdirectory we cannot allow redirecting to a different subdirectory. also tries to catch shenanigans to circumvent the check like ".." in the path.
Merge pull request #1648 from opf/backport/pr_1077

given openproject runs in a subdirectory we cannot allow redirecting to ...