Redirect bypasses host allowlist

Code reviewHard35 minAmazon style

Your task

Review this Java internal-API proxy with a host allowlist.