blocking returnUrl parameter on any request in Nginx

Question

I have a tomcat behind a nginx, and I need to block returnUrl parameter that is outside my domain. From what I\'ve found out, that it can be achieved by $arg_returnurl, but none