fuzz redirect: /security/fuzz