Issue Title: Datasette server redirects //example.com/ to https://example.com #2429 Status: Closed Labels: bug, security Milestone: Datasette 1.0a21 Participants: psd, jamesjefferies, simonw Description: The Datasette server command 302 redirects paths such as to , which is followed by and browsers to . A log of how to reproduce the issue locally is provided in a gist. The issue has been seen on a Datasette instance on Heroku, indicating it might be related to the 404 handler. A check in the code for the trailing slash redirect is referenced. A security advisory has been published: GHSA-w832-qq5g-x44m. Fix and Release: The open redirect fix was moved to . The issue is fixed in and .