igniterealtime/Openfire — pull request #58 by dwd (2014-08-04 16:10:45+00:00)
Title: OF-834: Close Open_redirect

This now reassembles a URL from the path, query, and fragment supplied, and
ignores the scheme and network location portions entirely.

Thus http://www.google.com/foo redirects to /foo only.