Potential fix for code scanning alert no. 47: URL redirection from remote source

[meraedit]

Potential fix for https://github.com/Servoy/servoy-eclipse/security/code-scanning/47

Best fix: ensure the redirect target is strictly a relative in-app path and reject any absolute/protocol-relative/newline-injected values before calling sendRedirect.

In com.servoy.eclipse.ngclient.ui/src/com/servoy/eclipse/ngclient/ui/IndexPageFilter.java, replace the current line 141 redirect construction with:

1. Build the base path from request.getRequestURI().replace("/svy_oauth", "").
2. Build the full target with optional query string.
3. Validate target is safe:
   • starts with /
   • does not start with //
   • does not contain \r or \n
   • does not contain "://" (absolute URL indicator)
4. If validation fails, redirect to a safe local fallback (for example, the sanitized base path or /).
5. Otherwise redirect to the validated target.

No new dependencies are needed; no import changes are required.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.