Open Redirect vulnerability on internal links

• Gitea version (or commit ref): all
• Git version: not relevant
• Operating system: not relevant
• Database (use [x]):
  • PostgreSQL
  • MySQL
  • MSSQL
  • SQLite
• Can you reproduce the bug at https://try.gitea.io:
  • Yes (provide example URL)
  • No
  • Not relevant
• Log gist: not relevent

Description

Screenshots

[jolheiser]

Fixed by #10462, #10465