xwiki/xwiki-platform — pull request #273 by sdumitriu (2014-05-06 20:54:31+00:00)
Title: XWIKI-10309: Phishing Through URL Redirection

I'm not sure this is safe:
- is there any page that uses `xredirect` to redirect to a different wiki?
- is there any chance that `xredirect` uses a full URL that has a different host than what XWiki believes was requested, for example an IP vs. name, or `localhost` seen behind a proxy?