Redirect Prefix Bypass

Scenario

LinkBridge tightened policy: redirect targets must start with the trusted corporate host. The check is a simple prefix test on the full URL string. Still reach an external site without breaking the prefix rule literally.

Your approach

1. Read the error when you point redirect at a plain external URL.
2. Review how the prefix validator parses the scheme and host.
3. Try URL forms where the trusted host appears early but another host receives the visit.
4. Confirm the browser lands off-site and the lab accepts the bypass.
5. Submit the flag from the success message.