Fixed bug #13137: redirect/returnUrl isn't validated in core (thanks to Georg Ringer...