From d3a5129f1f7015c7b0ffe98c5f8d328a597ae6e3 Mon Sep 17 00:00:00 2001
From: ggramaize <geoffroy+dev@gramaize.eu>
Date: Thu, 30 Aug 2018 14:34:59 +0200
Subject: [PATCH] [Security] Don't leak proxy credentials to target

---
 proxy/proxy.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/proxy/proxy.go b/proxy/proxy.go
index 0c16bdf..da10e59 100644
--- a/proxy/proxy.go
+++ b/proxy/proxy.go
@@ -117,6 +117,7 @@ func (p *Proxy) handle(w http.ResponseWriter, r *http.Request) error {
 			w.WriteHeader(http.StatusProxyAuthRequired)
 			return nil
 		}
+		r.Header.Del("Proxy-Authorization")
 	}
 
 	if r.Method == "CONNECT" {