Note to reviewers: This follows the lazy consensus from the [discussion](https://lists.apache.org/thread.html/c46e9f0493896744ffbfb6eb0d8eed53bb77003a8abbfa1ac5b63c16@%3Cdev.trafficserver.apache.org%3E) on the dev list.
We were sure we wanted this to be configurable, because there are several plausible alternatives. We were sure the default should not be to follow the redirect. When the admin configures the proxy to follow up to *N* redirects, if the *N+1*st redirect is to loopback it is not clear what would be expected. Should we simply return the 3xx as-is, or should we stop and inspect its `Location` header to see whether it is loopback and reject it if so? Since there seemed to be this little ambiguity, I chose the default behavior to simply return the 3xx response to the client. (One can still configure the 403.) [ Full content available at: https://github.com/apache/trafficserver/pull/4145 ] This message was relayed via gitbox.apache.org for [email protected]
