url redirection

How it was found

Summary:

[the following url is vulnerable to redirect]

https://app.upchieve.org

Steps To Reproduce:

when you add @evil.com the user will be directed to evil.com https://[email protected]

Impact

Users could get redirected to malicious domain