    setHeader: function (name, value) {
      t.equal(name, 'Location')
      t.equal(value, '/%2Fsomething/else/')
    },
A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.