removing minor redirect vulnerability