# SSRF: open redirection vulnerability