Open redirect via double-slash request path

Open redirect in PowerMux before 1.1.1 allows remote attackers to redirect users to untrusted sites through crafted request paths. Route.execute accepts a path such as //example.com/ and passes its trailing-slash-trimmed value to http.RedirectHandler, which treats //example.com as a scheme-relative external destination. Exploitation requires a user to follow an attacker-crafted link; the resulting redirect can support phishing but does not directly execute code.