add denylist for redirection to avoid open redirects

[enekofb]

This PR addresses a potential open redirect attack by checking, before redirecting, whether the path to redirect to is valid.