Because the parameters are not filtered, a URL jump vulnerability is created, which may cause users to be attacked by phishing.  Demonstrate the attack process  We can clearly see that it jumped to the phishing website http://127.0.0.1