diff --git a/lib/util/http/index.ts b/lib/util/http/index.ts
index 037c118e76c04d..5e9be7fcd7e115 100644
--- a/lib/util/http/index.ts
+++ b/lib/util/http/index.ts
@@ -84,7 +84,7 @@ export class Http<GetOptions = HttpOptions, PostOptions = HttpPostOptions> {
           // Check if request has been redirected to Amazon or an Azure blob (ACR)
           if (
             opts.search?.includes('X-Amz-Algorithm') ||
-            opts.hostname?.endsWith('blob.core.windows.net')
+            opts.hostname?.endsWith('blob.core.windows.net')  // lgtm [js/incomplete-url-substring-sanitization]
           ) {
             // if there is no port in the redirect URL string, then delete it from the redirect options.
             // This can be evaluated for removal after upgrading to Got v10