mirror of
https://github.com/espressif/esp-idf.git
synced 2026-05-28 16:46:31 +03:00
esp_http_client_set_redirection() now rejects any redirect target whose scheme is not https:// when the origin is HTTPS. This catches http, ftp, ws and any other scheme before client state is mutated. Same-host / https-to-https redirects are unaffected. Apps that intentionally want mixed-scheme redirects can set disable_auto_redirect=true and handle HTTP_EVENT_REDIRECT.