or alternatively: how to find an stupid exploit while being stupid
Abusing redirects to bypass gitea's url restrictions