diff --git a/core/java/src/net/i2p/util/EepGet.java b/core/java/src/net/i2p/util/EepGet.java index 19c19e6f0..e44b175ee 100644 --- a/core/java/src/net/i2p/util/EepGet.java +++ b/core/java/src/net/i2p/util/EepGet.java @@ -720,6 +720,8 @@ public class EepGet { try { if (_redirectLocation.startsWith("http://")) { _actualURL = _redirectLocation; + } else if (_redirectLocation.startsWith("https://")) { + throw new IOException("Redirect to https unsupported"); } else { // the Location: field has been required to be an absolute URI at least since // RFC 1945 (HTTP/1.0 1996), so it isn't clear what the point of this is.