all split()[0] are safe for url-redirect

javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst11.js

@@ -3,4 +3,7 @@ function foo() {
     var urlParts = document.location.href.split('?');
     var loc = urlParts[0] + "?" + boxes.value;
     window.location = loc
+
+    // Also OK.
+    window.location.replace(window.location.href.split("#")[0] + "#mappage");
 }