add Unvalidated Redirects bug