datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas

SummaryWhen datamodel-code-generator fetches a remote schema and follows an HTTP redirect, it re-sends the original request headers, including any Authorization header, to the redirect target even when the redirect changes origin host/port/scheme. Credentials that an operator scoped to a trusted...