#4931 make sure every redirect is sanitized. also fixes #4930