Is this the right way to specify it when upgrading the vulnerable apt?

  # apt -o 'Acquire::http::AllowRedirect=false' update
  # apt -o 'Acquire::http::AllowRedirect=false' install apt