Reflected xss on https://█████████

**Description:** The domain ███ is vulnerable to reflective xss. By clicking the following link you will get an alert message: https://█████/sec.html?redirect=javascript:alert(document.cookie);//://██████/ The error occurs due to a flaw in the check that verifies the validity of the redirect URL. …

function isSafeHost(uri) {
      var safeHosts = ['█████/', '███/', '████/', '██████████'];
      // Only consider localhost for local testing
      if (window.location.host.includes('localhost')) {
        safeHosts.push('localhost');
      }
      return safeHosts.find((host) => …