One of my users was exploring the jump nav, etc. and typed help in the search box and got the following:
Refusing to redirect to local resource "https://secure.phabricator.com/diviner/find/?name=Jump+Nav+User+Guide&type=article&jump=1". The URI has a domain, but the redirect is not marked external. Mark redirects as external to allow redirection off the local domain.
Looks like this happens on secure.phab as well.