http.ServerResponse.prototype.safeRedirect = function (url) {
  const safeURL = snip.getSafeOpenwhydURL(url, config.urlPrefix);
  if (safeURL === false) return this.forbidden();
  this.redirect(url);
};
The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.