window.opener-based Open Redirect