Open Redirect Checker

Analyze URL for open redirect risks. Check redirect params point to external domains.

We check redirect/url/next/return and similar params.

Fix: validate redirect targets (same origin or allowlist). Never redirect to user-controlled URLs without validation.