slachiewicz opened a new pull request, #958: URL: https://github.com/apache/maven-wagon/pull/958
Backport of #957 to the 3.x line, for #956. Clean cherry-pick; the HTTP provider code is the same on both branches. Headers configured for a repository followed redirects to other hosts. The wagon now records the repository origin and the configured header names in the request context, and an interceptor on the shared client removes those headers from requests whose target host differs from the origin in scheme, host or effective port. `-Dmaven.wagon.http.originScopedHeaders=false` restores the previous behaviour. Two tests cover the cross-origin and same-origin redirect cases; `wagon-http-lightweight` opts out as on master. Verified: `mvn -pl wagon-providers/wagon-http-shared,wagon-provider-test,wagon-providers/wagon-http -am verify` → green, 60 tests in `HttpWagonTest`. *This change was created with AI assistance.* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
