HUMAN VERIFICATION REQUIRED ASVS 3.7.2 External redirect allowlist

The application will only automatically redirect the user to a different hostname or domain (which is not controlled by the application) where the destination appears on an allowlist.