search

twitter-archive / CocoaSPDY

SPDY for iOS and OS X
Apache License 2.0
2.39k stars 233 forks source link

Strip Authorization header on 302 redirect #133

Closed StanTwinB closed 8 years ago

StanTwinB commented 8 years ago

A 302 redirect copies all of the headers from the original request, we should strip Authorization, because it shouldn't be included in the redirect's header since it was only relevant to the original request.

StanTwinB commented 8 years ago

@NSProgrammer @kgoodier this is pretty high priority. It can break certain WebView specific authorization workflows.

NSProgrammer commented 8 years ago

+2