    def get(self):
        if not current_user.is_authenticated():
            return "Must be logged in to log out", 200

        logout_user()
        return "Logged Out", 200
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.