Spring Framework Open Redirect Vulnerability