fix: strip out multiple header sections for redirect

Author: ducng99

system/HTTP/CURLRequest.php

@@ -385,6 +385,29 @@ public function send(string $method, string $url)
         // Set the string we want to break our response from
         $breakString = "\r\n\r\n";
 
+        // Strip out multiple redirect header sections
+        if (isset($this->config['allow_redirects']) && $this->config['allow_redirects'] !== false) {
+            while (preg_match('/^HTTP\/\d(?:\.\d)? 3\d\d/', $output)) {
+                $breakStringPos        = strpos($output, $breakString);
+                $redirectHeaderSection = substr($output, 0, $breakStringPos);
+                $redirectHeaders       = explode("\n", $redirectHeaderSection);
+                $locationHeaderFound   = false;
+
+                foreach ($redirectHeaders as $header) {
+                    if (str_starts_with(strtolower($header), 'location:')) {
+                        $locationHeaderFound = true;
+                        break;
+                    }
+                }
+
+                if ($locationHeaderFound) {
+                    $output = substr($output, $breakStringPos + 4);
+                } else {
+                    break;
+                }
+            }
+        }
+
         while (str_starts_with($output, 'HTTP/1.1 100 Continue')) {
             $output = substr($output, strpos($output, $breakString) + 4);
         }