CVE-2022-27463: Open redirect in wwbn/avideo

The vulnerability stems from the insecure validation of the redirectUri parameter in objects/login.json.php. The original code checked if the redirectUri started with the webSiteRootURL using a regex (preg_match). This check could be bypassed via subdomain tricks (e.g., http://legit.example.com.attacker.com). The patch replaced this check with the isSameDomain() function, which properly validates domain ownership. The regex-based validation in the main script logic (not a named function) was the root cause, making the entire script's redirect handling vulnerable.