forward_auth: copy_headers does not strip client-supplied identity headers (Fixes GHSA-7r4p-vjf4-gxv4)
#6708
| Job | Run time |
|---|---|
| 1m 15s | |
| 38s | |
| 1m 25s | |
| 1m 16s | |
| 1m 16s | |
| 1m 21s | |
| 1m 19s | |
| 1m 15s | |
| 1m 22s | |
| 1m 24s | |
| 12m 31s |