if "\@" in url ，the redirect result doesn't match the host of the new url("") #1800
Description
Line 269 in 5f15941
Developer often use new url("") host to verify the redirected url, but here the encodeurl will cause the host verification to fail, thus creating a URL hopping vulnerability