control: tag -1 moreinfo, unreproducible control: severity -1 minor You probably have apache misconfigured. It will normally return a Content-Location field, which will help you determine whether you got redirected correctly. This might help [0].
It's also possible that the X-XSS_protection field may cause chromium to do this, but when in devtools would it's maybe ignored. Best wishes, Mike [0] https://www.digitalocean.com/community/tutorials/how-to-configure-apache-to-use-custom-error-pages-on-ubuntu-14-04
