Open redirect

The following URL is vulnerable to an open redirect (it will redirect to google.com): https://support.nordvpn.com/#/path///google.com vulnerable code: ``` <script> if (window.location.href.indexOf('#/path') !== -1) { console.log("document.URL", document.URL) window.location.href = document.URL.slice(window.location.href.indexOf('#/path') + 6); } </script> ``` ## Impact Users could get redirected to malicious domain.