This form will only redirect if the input exactly matches:
https://www.google.com
Other URLs are blocked to prevent users from being redirected to untrusted or malicious domains.
This eliminates the open redirect vulnerability by validating and whitelisting allowed destinations.