Authentication data leak in Congueror

Referer: field may contain URL with authentication data...