title: Open redirect fortify issue in c#
body: <p>I am working on .net web application with 4.0 framework. I was working on Open Redirect issues where I found that we need encode our <code>Querystring</code> parameter values.</p>
  
  <p>my sample code </p>
  
  <pre><code>//Open redirect fortify issue
  
   string id= Request.QueryString["id"];
  
   if (!string.IsNullOrEmpty(id))
   -- here the issue
   Response.Redirect(webform.aspx?id=" + HttpUtility.HtmlEncode(id));
  </code></pre>
  
  <p>Can you please help?</p>