Security: Possible Redirection to foreign Page by using BrowserInfoPage's PageParameter

By link manipulation as a BookmarkableLink it is possible to redirect a User to foreign pages (probably without users notice).

Example:

http://wicketstuff.org/wicket14/compref/?wicket:bookmarkablePage=:org.apache.wicket.markup.html.pages.BrowserInfoPage&cto=http://www.google.de

Reason:
"Fallback"- Constructor in org.apache.wicket.markup.html.pages.BrowserInfoPage accepts every "cto" -PageParameter unevaluated regarding protocol prefex.