Development Security Guide How to Address the OWASP Top10 in Oracle Banking Payments Unvalidated Redirects and Forwards Network Security Unvalidated Redirects and Forwards Network Security Application uses 302 redirect wherever required. Banking UBS uses response.sendRedirect(newURL); Parent topic: How to Address the OWASP Top10 in Oracle Banking Payments