Language: PHP
Label: vulnerable
CWE: CWE-601 \u2014 URL Redirection to Untrusted Site ('Open Redirect')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

Code:
	public function __construct(
		string $appName,
		IRequest $request,
		ISession $session,
		IUserSession $userSession,
		SAMLSettings $samlSettings,
		UserBackend $userBackend,
		IConfig $config,
		IURLGenerator $urlGenerator,
		LoggerInterface $logger,
		IL10N $l,
		UserResolver $userResolver,
		UserData $userData,
		ICrypto $crypto
	) {
		parent::__construct($appName, $request);
		$this->session = $session;
		$this->userSession = $userSession;
		$this->samlSettings = $samlSettings;
		$this->userBackend = $userBackend;
		$this->config = $config;
		$this->urlGenerator = $urlGenerator;
		$this->logger = $logger;
		$this->l = $l;
		$this->userResolver = $userResolver;
		$this->userData = $userData;
		$this->crypto = $crypto;
	}