fix(mocker): restrict redirect mocks to the fs allowlist (#10972)