Archive

  1. RepoSecurity10 Oct 2026

    headerscrub

    Go http.Client checkRedirect policy that prevents caller-set headers like X-Api-Key from leaking when redirects cross origins.