function toSafeRedirectUrl(rawUrl) {
  if (rawUrl === undefined || rawUrl === null) return null
  const trimmed = String(rawUrl).trim()
  if (!trimmed) return null

  // Header icin tehlikeli kontrol karakterlerini temizle.
  const cleaned = trimmed.replace(/[\u0000-\u001F\u007F]/g, "")
  if (!cleaned) return null

  try {
    return encodeURI(cleaned)
  } catch {
    return null
  }
}

module.exports = { toSafeRedirectUrl }