Possible open redirect

[Amixtika]

Go to:

https://finto.fi/https://example.com

Select: "In English" on the top right, or any other language.

After that you will be redirected to www.example.com.

[osma]

Thanks for the issue.

I don't see this as an open redirect, as it requires the user to click on a link to https://example.com - but maybe I misunderstood something?

[Amixtika]

Hi Osma,

The potential issue is that a user can be instructed to click on this link, redirecting the user to a external malicous page.

[osma]

I see what you mean. The scenario seems a bit far-fetched, as this invokes a 404 error page. But I guess it's better to be on the safe side and prevent this from happening in the first place.