https://www.systemtek.co.uk/2018/10/apache-tomcat-default-servlet-open-redirect-vulnerability-cve-2018-11784/