const mergeUrls = base => input => (
  typeof input === 'string' ?
  new URL (input, base).href :
  base
);
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.