[issue33661] urllib may leak sensitive HTTP headers to a third-party web site

[Emmanuel Arias]

Emmanuel Arias <emmanuelarias30 at gmail.com> added the comment:

Hi!, 

Like say Katsuhiko YOSHIDA (https://github.com/python/cpython/pull/11292#issuecomment-449667371) this should be filter other sensitive header. I think that is reasonable if we think on a complete solution to this issue. 

Maybe this issue could be apply on 3.5+ version?

----------
nosy: +eamanu

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue33661>
_______________________________________