Allow redirect URLs containing http or https but do not start with them

auth_oidc/controllers/main.py

@@ -62,7 +62,7 @@ def logout(self, redirect="/web/login"):
             p = request.env["auth.oauth.provider"].sudo().browse(user.oauth_provider_id.id)
             if p.logout_endpoint:
                 r = redirect
-                if r.find('http') == -1 and r.find('https') == -1:
+                if not r.startswith('http:') and not r.startswith('https:'):
                     r = request.env['ir.config_parameter'].sudo().get_param('web.base.url') + r
                 logout_base_url = p.logout_endpoint
                 params = {}