    def __str__(self):
        return self.xml().encode('utf8')
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.