fix: Fix open redirect vulnerability for localePrefix: 'as-necessary' by sanitizing pathname in the middleware#1208