Provide a hook_drupal_goto_alter().

+function common_test_drupal_goto_land() {

The function name is odd. goto l() and fail? Go to land? Which land? It makes sense after staring at it, but phpdoc on these functions would've helped, maybe calling it 'landing' instead of 'land'? Very minor, otherwise looks ready.

Merged into #1577: Mapping privilege separation on non-SSL/SSL.

chx asked me to look at this. The patch is missing PHPdoc, hook documentation, and has some coding standards violations so I didn't look too closely at it since it's clearly not ready for committer review.

This is a bit unfortunate, that these function signatures don't match:

function drupal_goto($path = '', $query = NULL, $fragment = NULL, $http_response_code = 302)
...
+  drupal_alter('drupal_goto', $args);

But chx pointed out that this is because those are the params drupal_alter() takes.

What would help a lot are some use cases for why this hook is useful, since it kinda seems like a weird hack, and introduced Yet Another Way To Redirect Form Submissions. Are there use cases other than SSL? And even for SSL, how does this stop me from manually typing in http://example.com instead of https://example.com?

For SSL it does not stop you, actually the redirect happens from HTTPS to HTTP because the point in the SSL patch is to provide a mechanism where most requests can be HTTP while only those that badly need security require HTTPS. Anyways, the SSL patch has all the things you want and can be separated out again to here. Also, motivations besides the HTTPS dance is response code, the API example is where misery module changes the response code to 500. In general, providing more alters when there is so little performance penalty is just good. That's what makes Drupal powerful.

This was merged into the SSL issue where it was fixed up a bit. Not sure if we want to separate out or what #8 and #9 are saying.

what are the odds for a 6.x backport getting in?