forward_auth: copy_headers does not strip client-supplied identity headers (Fixes GHSA-7r4p-vjf4-gxv4)#7545

francislavoie merged 1 commit intocaddyserver:mastercaddyserver/caddy:masterfrom

NucleiAv:fix/forward-auth-copy-headers-injectionNucleiAv/caddy:fix/forward-auth-copy-headers-injectionCopy head branch name to clipboard