Language: Python
Label: vulnerable
CWE: CWE-200 \u2014 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Code:
    def test_retry_default_remove_headers_on_redirect(self) -> None:
        retry = Retry()

        assert list(retry.remove_headers_on_redirect) == ["authorization"]