Rails 7 has the `ActionController::Base.raise_on_open_redirects = true` option to mitigate open redirects: https://github.com/rails/rails/commit/5e93cff83599833380b4cb3d99c020b5efc7dd96