- name: same-origin-redirect
  where: "app/continue/route.ts"
  each: method
  ensure: >-
    safeReturnTo must return a URL on the supplied origin. An external URL supplied as returnTo must fall back to the root URL on that origin.