Red Securium

Web applications often redirect and forward users to other pages and websites, and use untrusted data to determine the destination pages. Without proper validation, attackers can redirect victims to phishing or malware sites, or use forwards to use unauthorized pages. Sometime, your application may need to redirect to another area by sending a redirect header to the customer in an HTTP response .This method found in applications that divert after an successful  verification. The redirection will be in the login form or the URL. both of which can be messed with by the client.Such redirects may attempt to install malware or trick victims into revealing passwords or other delicate data. Risky forwards may permit get to control bypass. Developers can prevent the weakness by approving client input and furthermore confirming the URL being referred to is really an endorsed target URL. You can use a guide map technique where URLs are mapped to names, for example, landi