MEDIUM6.8
GO-2025-3751
Sensitive headers not cleared on cross-origin redirect in net/http
Quick fix
GO-2025-3751 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.23.10Details
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
Are you affected?
Enter the version of the package you're using.