XWIKI-10309: Phishing Through URL Redirection

I'm not sure this is safe:
- is there any page that uses `xredirect` to redirect to a different wiki?
- is there any chance that `xredirect` uses a full URL that has a different host than what XWiki believes was requested, for example an IP vs. name, or `localhost` seen behind a proxy?