void am_strip_blank(const char **s)
{
    while ((**s == ' ') || (**s == '\t'))
        (*s)++;
    return;
}

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.