tree 3e543652bc74d5401d6c3858410ad434ae02451a
parent 73e494f86239b7edcf44f4c185c997b05c0e763b
parent cb4d2d35c4622ec2513c1c352d30ff8f9f9cdb9e
author Junio C Hamano <gitster@pobox.com> 1482187531 -0800
committer Junio C Hamano <gitster@pobox.com> 1482187532 -0800

Merge branch 'jk/http-walker-limit-redirect-2.9'

Transport with dumb http can be fooled into following foreign URLs
that the end user does not intend to, especially with the server
side redirects and http-alternates mechanism, which can lead to
security issues.  Tighten the redirection and make it more obvious
to the end user when it happens.

* jk/http-walker-limit-redirect-2.9:
  http: treat http-alternates like redirects
  http: make redirects more obvious
  remote-curl: rename shadowed options variable
  http: always update the base URL for redirects
  http: simplify update_url_from_redirect