GHSA-pw9p-v7r6-gx4p — Tornado: Open redirect in RedirectHandler via protocol-relative URLs

Tornado's RedirectHandler can, with certain URL templates and regular-expression capture groups, allow an attacker to redirect users to a host of the attacker's choosing. This creates an open redirect on the application's domain that can be used in phishing.