Authorization header leak in ssrf_filter via cross-host redirect leads to credential theft and unauthorized access

`ssrf_filter` follows redirects by rebuilding each redirected request from the original request options. When a redirect crosses to a different host, it still reapplies caller-supplied sensitive state such as the `Authorization` header.

   git clone https://github.com/arkadiyt/ssrf_filter
   cd ssrf_filter