Comment by vasquez

> And make sure the 3 redirects preserve any request URI parts after the domain as well.

I intentionally break such requests by dropping anything beyond the host name.

If someone are sending data in the open, I don't want their clients to keep working thanks to built-in support for redirects.