X (Formerly Twitter): Redirect URL in /intent/ functionality is not properly escaped

Choose a tweet from a user that the victim follows but not favorited. Send the victim message like "Please favorite this:...