SECURITY: Don't allow redirects with periods in case you don't control
other tlds on the same domain.
Merge remote-tracking branch 'origin/stable' into pkgr