From cf246d072badd9b31b487e7a0b00490e4cc9584f Mon Sep 17 00:00:00 2001 From: Sean McArthur Date: Mon, 24 Jul 2017 18:16:44 -0700 Subject: [PATCH] fix panic in removing Authorization header during redirect Closes #171 --- src/redirect.rs | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/redirect.rs b/src/redirect.rs index 04d4f5a..c6c3b0d 100644 --- a/src/redirect.rs +++ b/src/redirect.rs @@ -1,6 +1,6 @@ use std::fmt; -use hyper::header::{Headers, Authorization, Cookie}; +use hyper::header::{Headers}; use Url; @@ -198,8 +198,8 @@ pub fn remove_sensitive_headers(headers: &mut Headers, next: &Url, previous: &[U let cross_host = next.host_str() != previous.host_str() || next.port_or_known_default() != previous.port_or_known_default(); if cross_host { - headers.remove::>(); - headers.remove::(); + headers.remove_raw("authorization"); + headers.remove_raw("cookie"); headers.remove_raw("cookie2"); headers.remove_raw("www-authenticate"); } @@ -260,7 +260,7 @@ fn test_redirect_policy_custom() { #[test] fn test_remove_sensitive_headers() { - use hyper::header::Accept; + use hyper::header::{Accept, Authorization, Cookie}; let mut headers = Headers::new(); headers.set(Accept::star());