SafeCrossScheme internal redirect predicate

    An internal redirect predicate that checks the scheme between the downstream url and the redirect target url and allows a) same scheme redirect and b) safe cross scheme redirect, which means if the downstream scheme is HTTPS, both HTTPS and HTTP redirect targets are allowed, but if the downstream scheme is HTTP, only HTTP redirect targets are allowed.

    Note

    Tip