Say I store the url path in a query parameter like `/?return_back_to=/foo/bar`

Then pass this to some external auth service like Microsoft, which does the login and returns to the same url with my query parameter.

At this point, is it safe to get the value from the query parameter and redirect using React `navigate()` to this url? Or is this considered an "open redirect vulnerability" ?