Vendor
The urllib library fails to sanitize sensitive headers during cross-origin redirects, leading to the automatic exposure of Authorization, Cookie, and Proxy-Authorization headers to unauthorized endpoints.