From bbf3ad7fd0249cf9482493b0a07ecd74dee83fb3 Mon Sep 17 00:00:00 2001
From: "Dylan M. Taylor" <dylan@dylanmtaylor.com>
Date: Tue, 10 Nov 2026 17:56:37 -0500
Subject: [PATCH] xtask: only follow https redirects when fetching PngSuite
 (#11231)

---
 xtask/src/corpus.rs | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/xtask/src/corpus.rs b/xtask/src/corpus.rs
index 4408808642f..866c354c299 100644
--- a/xtask/src/corpus.rs
+++ b/xtask/src/corpus.rs
@@ -386,7 +386,20 @@ fn fetch_pngsuite() -> Result<(), String> {
         PNGSUITE_MANIFEST,
         |archive| {
             let mut curl = Command::new("curl");
-            curl.args(["-fsSL", "--retry", "3", "--max-filesize", &PNGSUITE_MAX_ARCHIVE_BYTES.to_string(), "-A", USER_AGENT, "-o", "-", PNGSUITE_URL]);
+            curl.args([
+                "-fsSL",
+                "--proto-redir",
+                "=https",
+                "--retry",
+                "3",
+                "--max-filesize",
+                &PNGSUITE_MAX_ARCHIVE_BYTES.to_string(),
+                "-A",
+                USER_AGENT,
+                "-o",
+                "-",
+                PNGSUITE_URL,
+            ]);
             download_pngsuite(curl, archive)
         },
         |archive, files| {