URL Redirection to Untrusted Site (Open Redirect)

macaron before has an open redirect in the static handler...