Open redirection protection bypass

More info at https://simplesamlphp.org/security/201801-02...