Skip to content

fix: do not forward credential headers on cross-origin redirect#813

Merged
fengmk2 merged 4 commits into
2.xfrom
fix/cross-origin-redirect-credential-leak-2.x
Jun 13, 2026
Merged

fix: do not forward credential headers on cross-origin redirect#813
fengmk2 merged 4 commits into
2.xfrom
fix/cross-origin-redirect-credential-leak-2.x

fix: address review feedback on cross-origin redirect sanitization

44c1935
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project failed Jun 13, 2026 in 1s

89.94% (-1.98%) compared to 02cad0e

View this Pull Request on Codecov

89.94% (-1.98%) compared to 02cad0e

Details

Codecov Report

❌ Patch coverage is 60.86957% with 18 lines in your changes missing coverage. Please review.
✅ Project coverage is 89.94%. Comparing base (02cad0e) to head (44c1935).
⚠️ Report is 3 commits behind head on 2.x.

Files with missing lines Patch % Lines
lib/urllib.js 60.86% 18 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##              2.x     #813      +/-   ##
==========================================
- Coverage   91.91%   89.94%   -1.98%     
==========================================
  Files           6        6              
  Lines         829      875      +46     
  Branches      225      243      +18     
==========================================
+ Hits          762      787      +25     
- Misses         67       88      +21     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.