Open-Redirect's vulnerability measures