Phishing Holes

ASP.NET preventing phishing with SafeRedirect implementation behind Response.Redirect. Calls to SafeRedirect.Redirect will only succeed if the specified URL belongs to a predefined “whitelist” of known good domains specified in the application’s configuration file.