Reworded the caution about open redirects

javiereguiluz · xabbuh · commit 8f7774609d78 · 2016-11-22T21:25:31.000+01:00
diff --git a/controller.rst b/controller.rst
@@ -186,12 +186,11 @@ and ``redirect()`` methods::
 
 For more information, see the :doc:`Routing chapter </routing>`.
 
-.. tip::
+.. caution::
 
-    The ``redirect()`` method does not check it's input. If you use user input 
-    directly as it's parameter, you might open up your page to unvalidated 
-    redirects and forwards, which is in the OWASP top 10 of web application 
-    security flaws. For more information, see https://www.owasp.org/index.php/Open_redirect
+    The ``redirect()`` method does not check its destination in any way. If you 
+    redirect to some URL provided by the end-users, your application may be open 
+    to the `unvalidated redirects security vulnerability`_.
 
 
 .. tip::
@@ -571,3 +570,5 @@ Learn more about Controllers
     :glob:
 
     controller/*
+
+.. _`unvalidated redirects security vulnerability`: https://www.owasp.org/index.php/Open_redirect
