Open Redirects

github.com/concourse/atc is vulnerable to open redirect attacks. These attacks are possible because the oauthcallbackhandler doesn't validate that the redirect URL is one within the website...