Trying to add a redirect payload through a URL parameter (but it's just getting harmlessly tacked to the end of the domain)? Bypass by adding the same parameter twice. When the link is displayed on the page, the browser adds a comma and breaks up the pattern:
So, this fails:
whatever.com/cc?DestPage=/"><a%20href="badsite.com">
...because it redirects to whatever.com/badsite.com.
But, this succeeds, redirecting to badsite.com:
whatever.com/cc?DestPage=">&DestPage=<a%20href="badsite.com">
PS This also works for XSS payloads, though in this case, wouldn't require the double-parameter trick. It's probably more common for open redirects, but let me know!
