Redirect::modifyBySecurity

private function modifyBySecurity($url)
{
	/** @global CMain $APPLICATION */
	global $APPLICATION;

	$isExternal = $this->isExternalUrl($url);
	if(!$isExternal && strpos($url, "/") !== 0)
	{
		$url = $APPLICATION->GetCurDir() . $url;
	}
	//doubtful about & and http response splitting defence
	$url = str_replace(["&", "r", "n"], ["&", "", ""], $url);

	if (!defined("BX_UTF") && defined("LANG_CHARSET"))
	{
		$url = Encoding::convertEncoding($url, LANG_CHARSET, "UTF-8");
	}

	return $url;
}