XWIKI-5155: HTTP header injection via xredirect
Fixed.