Potential open redirect pattern
A Location header contains a parameter name often used for open redirects, such as url, redirect, next, return, continue, dest, or destination.
Why it matters
If that parameter's value is copied into the redirect without an allowlist, any site can send your users elsewhere.
What to do
This is a hint, not proof. Allowlist redirect targets on the server.
Reference
Redirect chains should preserve HTTPS and avoid open-redirect patterns.