Open redirect: Cartoon Network

type.inbound
and any(body.links,
        .href_url.domain.sld == 'cartoonnetwork'
        // it has to be www. - not hitting the www doesn't work
        and .href_url.domain.subdomain == 'www'
        // the path startswith a double //
        and strings.starts_with(.href_url.path, '//')
        // the path has to end in a trailing /
        and strings.ends_with(.href_url.path, '/')
)