mirror of
https://git.yoctoproject.org/poky
synced 2026-02-21 17:09:42 +01:00
Proxy-Authorization and Proxy-Authenticate headers persisted on
cross-origin redirects potentially leaking sensitive information.
Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-4673
Upstream-patch:
b897e97c36
(From OE-Core rev: c07547c19e5372ed5eaac8530b2dd651302542a8)
Signed-off-by: Praveen Kumar <praveen.kumar@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>