title: prevent using javascript in window.location
body: <p>I have a page which redirects to a url from parameters in query string like:<br>
  <b>page.html?redirectUrl=index.html</b><br>
  Inside the page i have code like this:<br>
  <b>window.localtion.href = redirectUrl;</b>
  <br>It is requiements to use redirect url by parameters. The page contains secure sensitive data. Someone can make the url with javascript like:<br>
  <b>page.html?redirectUrl=javascript:alert(document.getElementById("password").value)</b><br>
  and secure data can be stolen.
  <br><br>
  How to prevent bypass javascript code to window.localtion.href?</p>