  function fail (request, response) {
    t.ok(false) // fail if we reach here
  }
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.