diff --git a/src/hello.js b/src/hello.js
index e8618d17..9a634ca8 100644
--- a/src/hello.js
+++ b/src/hello.js
@@ -1304,7 +1304,9 @@ hello.utils.extend(hello.utils, {
 			// Redirect to the host
 			var path = _this.qs(state.oauth_proxy, p);
 
-			location.assign(path);
+			if (isValidUrl(path)) {
+				location.assign(path);
+			}
 
 			return;
 		}