[bug #56909] wget Authorization header leak via 3xx redirects

[Paul Wise]

Follow-up Comment #10, bug #56909 (project wget):

Looking at the curl patch, it seems that it restricts all Authorization
headers, even manually added ones, unless the option is set. That seems like
the right way to go to me.

https://github.com/curl/curl/commit/af32cd3859336ab.patch

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?56909>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/