diff options
| author | Egor Tensin <egor@tensin.name> | 2025-12-16 16:51:48 +0100 |
|---|---|---|
| committer | Egor Tensin <egor@tensin.name> | 2025-12-16 16:51:54 +0100 |
| commit | 342fb8ba128c1fbbf5195a7b5d56cb5b8f8fdca9 (patch) | |
| tree | 1af9b90985a2685c70e8e756eabc62a21ca362bb /node_modules/undici/lib/fetch/index.js | |
| parent | bump dependencies (diff) | |
| download | cleanup-path-342fb8ba128c1fbbf5195a7b5d56cb5b8f8fdca9.tar.gz cleanup-path-342fb8ba128c1fbbf5195a7b5d56cb5b8f8fdca9.zip | |
bump dependencies
Diffstat (limited to 'node_modules/undici/lib/fetch/index.js')
| -rw-r--r-- | node_modules/undici/lib/fetch/index.js | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/node_modules/undici/lib/fetch/index.js b/node_modules/undici/lib/fetch/index.js index 17c3d87..dea2069 100644 --- a/node_modules/undici/lib/fetch/index.js +++ b/node_modules/undici/lib/fetch/index.js @@ -1203,6 +1203,9 @@ function httpRedirectFetch (fetchParams, response) { // https://fetch.spec.whatwg.org/#cors-non-wildcard-request-header-name request.headersList.delete('authorization') + // https://fetch.spec.whatwg.org/#authentication-entries + request.headersList.delete('proxy-authorization', true) + // "Cookie" and "Host" are forbidden request-headers, which undici doesn't implement. request.headersList.delete('cookie') request.headersList.delete('host') |